CVE-2023-42794
published 2023-10-10CVE-2023-42794: Incomplete Cleanup vulnerability in Apache Tomcat. The internal fork of Commons FileUpload packaged with Apache Tomcat 9.0.70 through 9.0.80 and 8.5.85 through…
PriorityP429medium5.9CVSS 3.1
AVNACHPRNUINSUCNINAH
EPSS
1.85%
77.0th percentile
Incomplete Cleanup vulnerability in Apache Tomcat.
The internal fork of Commons FileUpload packaged with Apache Tomcat 9.0.70 through 9.0.80 and 8.5.85 through 8.5.93 included an unreleased,
in progress refactoring that exposed a potential denial of service on
Windows if a web application opened a stream for an uploaded file but
failed to close the stream. The file would never be deleted from disk
creating the possibility of an eventual denial of service due to the
disk being full.
Other, EOL versions may also be affected.
Users are recommended to upgrade to version 9.0.81 onwards or 8.5.94 onwards, which fixes the issue.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apache | tomcat | — | — |
| apache | tomcat | >= 8.5.85 < 8.5.94 | 8.5.94 |
| apache | tomcat | >= 9.0.70 < 9.0.81 | 9.0.81 |
| apache_software_foundation | apache_tomcat | 8.5.85 – 8.5.93 | — |
| apache_software_foundation | apache_tomcat | 9.0.70 – 9.0.80 | — |
| atlassian | confluence_data_center | — | — |
| debian | tomcat10 | — | — |
| debian | tomcat9 | — | — |
CVSS provenance
nvdv3.15.9MEDIUMCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
osv5.9MEDIUM
vendor_apache5.9MEDIUM
vendor_debian5.9LOW
vendor_oracle5.9MEDIUM
vendor_redhat5.9MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA ICS
Siemens SINEC NMS
cisa_ics·2024-08-15·CVSS 7.0
[HIGH] Siemens SINEC NMS
ICS Advisory
##
Siemens SINEC NMS
Release DateAugust 15, 2024
Alert CodeICSA-24-228-06
Related topics:
Industrial Control System Vulnerabilities, Industrial Control Systems
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global).
View CSAF
## 1. EXECUTIVE SUMMARY
- CVSS v4 9.4
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: Siemens
- Equipment: SINEC NMS
- Vulnerabilities: Use After Free, Improper Input Validation, Deserialization of Untrusted Data, Improper Restriction of Operations
Oracle
Oracle Oracle Communications Applications Risk Matrix: Core (Apache Tomcat) — CVE-2023-42794
vendor_oracle·2024-01-15·CVSS 5.9
CVE-2023-42794 [MEDIUM] Oracle Oracle Communications Applications Risk Matrix: Core (Apache Tomcat) — CVE-2023-42794
Oracle Oracle Communications Applications Risk Matrix: Core (Apache Tomcat) vulnerability
CVE: CVE-2023-42794
CVSS: 5.9
Protocol: HTTP
Remote exploit: Yes
Affected versions: Network
Advisory: cpujan2024 (JAN 2024)
Atlassian
CVE-2023-42794: DoS (Denial of Service) org.apache.tomcat:tomcat-catalina in Confluence Data Center and Server
vendor_atlassian·2023-11-21·CVSS 7.5
CVE-2023-42794 [MEDIUM] CVE-2023-42794: DoS (Denial of Service) org.apache.tomcat:tomcat-catalina in Confluence Data Center and Server
CVE-2023-42794: DoS (Denial of Service) org.apache.tomcat:tomcat-catalina in Confluence Data Center and Server
DoS (Denial of Service) org.apache.tomcat:tomcat-catalina in Confluence Data Center and Server
CVE: CVE-2023-42794
Severity: HIGH
Affected products: Confluence Data Center
Red Hat
tomcat: FileUpload: DoS due to accumulation of temporary files on Windows
vendor_redhat·2023-10-10·CVSS 5.9
CVE-2023-42794 [MEDIUM] CWE-459 tomcat: FileUpload: DoS due to accumulation of temporary files on Windows
tomcat: FileUpload: DoS due to accumulation of temporary files on Windows
Incomplete Cleanup vulnerability in Apache Tomcat.
The internal fork of Commons FileUpload packaged with Apache Tomcat 9.0.70 through 9.0.80 and 8.5.85 through 8.5.93 included an unreleased,
in progress refactoring that exposed a potential denial of service on
Windows if a web application opened a stream for an uploaded file but
failed to close the stream. The file would never be deleted from disk
creating the possibility of an eventual denial of service due to the
disk being full.
Other, EOL versions may also be affected.
Users are recommended to upgrade to version 9.0.81 onwards or 8.5.94 onwards, which fixes the issue.
A flaw was found in Apache Tomcat. An incomplete cleanup vulnerability with the internal fork
Debian
CVE-2023-42794: tomcat10 - Incomplete Cleanup vulnerability in Apache Tomcat. The internal fork of Commons...
vendor_debian·2023·CVSS 5.9
CVE-2023-42794 [MEDIUM] CVE-2023-42794: tomcat10 - Incomplete Cleanup vulnerability in Apache Tomcat. The internal fork of Commons...
Incomplete Cleanup vulnerability in Apache Tomcat. The internal fork of Commons FileUpload packaged with Apache Tomcat 9.0.70 through 9.0.80 and 8.5.85 through 8.5.93 included an unreleased, in progress refactoring that exposed a potential denial of service on Windows if a web application opened a stream for an uploaded file but failed to close the stream. The file would never be deleted from disk creating the possibility of an eventual denial of service due to the disk being full. Other, EOL versions may also be affected. Users are recommended to upgrade to version 9.0.81 onwards or 8.5.94 onwards, which fixes the issue.
Scope: local
bookworm: resolved
forky: resolved
sid: resolved
trixie: resolved
Apache
Apache tomcat: CVE-2023-42794
vendor_apache·CVSS 5.9
CVE-2023-42794 [MEDIUM] Apache tomcat: CVE-2023-42794
Apache tomcat: CVE-2023-42794
Tomcat's internal fork of a Commons FileUpload included an unreleased, in progress refactoring that exposed a potential denial of service on Windows if a web application opened a stream for an uploaded file but failed to close the stream. The file would never be deleted from disk creating the possibility of an eventual denial of service due to the disk being full. This was fixed with commit c99ffc30 . This issue was reported to the Tomcat Security Team on 1 September 2023. The issue was made public on 10 October 2023. Affects: 8.5.85 to 8.5.93 2023-08-25 Fixed in Apache Tomcat 8.5.93 Moderate: Open redirect
OSV
CVE-2023-42794: Incomplete Cleanup vulnerability in Apache Tomcat
osv·2023-10-10·CVSS 5.9
CVE-2023-42794 [MEDIUM] CVE-2023-42794: Incomplete Cleanup vulnerability in Apache Tomcat
Incomplete Cleanup vulnerability in Apache Tomcat. The internal fork of Commons FileUpload packaged with Apache Tomcat 9.0.70 through 9.0.80 and 8.5.85 through 8.5.93 included an unreleased, in progress refactoring that exposed a potential denial of service on Windows if a web application opened a stream for an uploaded file but failed to close the stream. The file would never be deleted from disk creating the possibility of an eventual denial of service due to the disk being full. Users are recommended to upgrade to version 9.0.81 onwards or 8.5.94 onwards, which fixes the issue.
GHSA
Apache Tomcat Incomplete Cleanup vulnerability
ghsa·2023-10-10
CVE-2023-42794 [MEDIUM] CWE-459 Apache Tomcat Incomplete Cleanup vulnerability
Apache Tomcat Incomplete Cleanup vulnerability
Incomplete Cleanup vulnerability in Apache Tomcat.
The internal fork of Commons FileUpload packaged with Apache Tomcat 9.0.70 through 9.0.80 and 8.5.85 through 8.5.93 included an unreleased, in progress refactoring that exposed a potential denial of service on Windows if a web application opened a stream for an uploaded file but failed to close the stream. The file would never be deleted from disk creating the possibility of an eventual denial of service due to the disk being full.
Users are recommended to upgrade to version 9.0.81 onwards or 8.5.94 onwards, which fixes the issue.
OSV
Apache Tomcat Incomplete Cleanup vulnerability
osv·2023-10-10
CVE-2023-42794 [MEDIUM] Apache Tomcat Incomplete Cleanup vulnerability
Apache Tomcat Incomplete Cleanup vulnerability
Incomplete Cleanup vulnerability in Apache Tomcat.
The internal fork of Commons FileUpload packaged with Apache Tomcat 9.0.70 through 9.0.80 and 8.5.85 through 8.5.93 included an unreleased, in progress refactoring that exposed a potential denial of service on Windows if a web application opened a stream for an uploaded file but failed to close the stream. The file would never be deleted from disk creating the possibility of an eventual denial of service due to the disk being full.
Users are recommended to upgrade to version 9.0.81 onwards or 8.5.94 onwards, which fixes the issue.
No detection rules found.
No public exploits indexed.
2023-10-10
Published