Known vulnerabilities in tomcat9 (Debian package) 9.0.31-1~deb10u2
Vendor:
Debian
Software:
tomcat9 (Debian package)
Version:
9.0.31-1~deb10u2
Software CPE:
cpe:2.3:o:debian:tomcat9_debian_package:*:*:*:*:*:debian_linux:*:*
Website:
https://www.debian.org/
Total vulnerabilities:
8
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.2
Vulnerabilities by Severity
9.0.31-1~deb10u7
9.0.31-1~deb10u8
9.0.31-1~deb10u9
9.0.31-1~deb10u10
9.0.31-1~deb10u11
9.0.31-1~deb10u12
9.0.36-1
9.0.37-1
9.0.43-1
9.0.43-2~deb11u5
9.0.43-2~deb11u8
9.0.43-2~deb11u9
9.0.43-2~deb11u11
9.0.43-2~deb11u12
9.0.43-2
9.0.43-3
9.0.53-1
9.0.54-1
9.0.55-1
9.0.58-1
9.0.62-1
9.0.63-1
9.0.64-1
9.0.64-2
9.0.65-1
9.0.67-1
9.0.68-1
9.0.68-1.1
9.0.70-1
9.0.107-0+deb11u1
9.0.43-2~deb11u10
9.0.43-2~deb11u7
9.0.43-2~deb11u6
9.0.43-2~deb11u4
9.0.43-2~deb11u3
9.0.43-2~deb11u1
9.0.43-2~deb11u2
9.0.31-1~deb10u6
9.0.31-1~deb10u5
9.0.31-1~deb10u4
9.0.31-1~deb10u3
9.0.41-1~bpo10+1
9.0.41
9.0.41-1
9.0.40
9.0.40-1
9.0.39-1~bpo10+1
9.0.39
9.0.39-1
9.0.38-1~bpo10+1
9.0.38
9.0.38-1
9.0.37-3
9.0.37
9.0.37-2
9.0.37-1~bpo10+1
9.0.31-1~deb10u2
9.0.35-1~bpo10+1
9.0.35-1
9.0.31-1~deb10u1
9.0.34
9.0.34-1
9.0.31
9.0.16
9.0.31-1~bpo10+1
9.0.31-1
9.0.27-1
9.0.13-1
9.0.13-2
9.0.14-1~bpo9+1
9.0.14-1
9.0.16-1~bpo9+1
9.0.16-1
9.0.16-2
9.0.16-3
9.0.16-4~bpo9+1
9.0.16-4
9.0.16-5
9.0.22-1
9.0.24-1
Vulnerabilities (8)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU57389 - Resource exhaustion CVE-2021-42340 |
CWE-400 | Medium | 9.0.43-2~deb11u3 | 15.10.2021 |
SB2021101507 SB2021110507 SB2021111711 and 28 more |
||
| #VU56634 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2021-41079 |
CWE-835 | Medium | 9.0.31-1~deb10u6, 9.0.43-2~deb11u2 | 15.09.2021 |
SB2021091527 SB2021100721 SB2021101512 and 16 more |
||
| #VU55423 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2021-33037 |
CWE-444 | Medium | 9.0.31-1~deb10u5 | 29.07.2021 |
SB2021072907 SB2021080807 SB2021080808 and 30 more |
||
| #VU55417 - Improper Authentication CVE-2021-30640 |
CWE-287 | Medium | 9.0.31-1~deb10u5, 9.0.31-1~deb10u6, 9.0.43-2~deb11u2 | 29.07.2021 |
SB2021072901 SB2021072902 SB2021081231 and 14 more |
||
| #VU51014 - Resource Management Errors CVE-2021-25122 |
CWE-399 | Medium | 9.0.31-1~deb10u4 | 01.03.2021 |
SB2021030115 SB2021031619 SB2021032519 and 23 more |
||
| #VU51012 - Deserialization of Untrusted Data CVE-2021-25329 |
CWE-502 | Medium | 9.0.31-1~deb10u4 | 01.03.2021 |
SB2021030115 SB2021031620 SB2021040723 and 16 more |
||
| #VU48779 - Resource Management Errors CVE-2020-17527 |
CWE-399 | Medium | 9.0.31-1~deb10u3 | 03.12.2020 |
SB2020120401 SB2020120509 SB2020120510 and 21 more |
||
| #VU47516 - Resource Management Errors CVE-2020-13943 |
CWE-399 | Medium | 9.0.31-1~deb10u3 | 12.10.2020 |
SB2020101213 SB2020110102 SB2020110603 and 6 more |