ID de Prueba:	1.3.6.1.4.1.25623.1.0.833460
Categoría:	openSUSE Local Security Checks
Título:	openSUSE Security Advisory (SUSE-SU-2024:0472-1)
Resumen:	The remote host is missing an update for the 'tomcat' package(s) announced via the SUSE-SU-2024:0472-1 advisory.
Descripción:	Summary: The remote host is missing an update for the 'tomcat' package(s) announced via the SUSE-SU-2024:0472-1 advisory. Vulnerability Insight: This update for tomcat fixes the following issues: Updated to Tomcat 9.0.85: - CVE-2023-45648: Improve trailer header parsing (bsc#1216118). - CVE-2023-42794: FileUpload: remove tmp files to avoid DoS on Windows (bsc#1216120). - CVE-2023-42795: Improve handling of failures during recycle() methods (bsc#1216119). - CVE-2023-46589: Fixed HTTP request smuggling due to incorrect headers parsing (bsc#1217649) - CVE-2024-22029: Fixed escalation to root from tomcat user via %post script. (bsc#1219208) The following non-security issues were fixed: - Fixed the file permissions for server.xml (bsc#1217768, bsc#1217402). Find the full release notes at: [link moved to references] Affected Software/OS: 'tomcat' package(s) on openSUSE Leap 15.5. Solution: Please install the updated package(s). CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:C/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2023-42794 https://lists.apache.org/thread/vvbr2ms7lockj1hlhz5q3wmxb2mwcw82 http://www.openwall.com/lists/oss-security/2023/10/10/8 Common Vulnerability Exposure (CVE) ID: CVE-2023-42795 Debian Security Information: DSA-5521 (Google Search) https://www.debian.org/security/2023/dsa-5521 Debian Security Information: DSA-5522 (Google Search) https://www.debian.org/security/2023/dsa-5522 https://lists.apache.org/thread/065jfyo583490r9j2v73nhpyxdob56lw https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html http://www.openwall.com/lists/oss-security/2023/10/10/9 Common Vulnerability Exposure (CVE) ID: CVE-2023-45648 https://lists.apache.org/thread/2pv8yz1pyp088tsxfb7ogltk9msk0jdp http://www.openwall.com/lists/oss-security/2023/10/10/10 Common Vulnerability Exposure (CVE) ID: CVE-2023-46589 https://lists.apache.org/thread/0rqq6ktozqc42ro8hhxdmmdjm1k1tpxr https://www.openwall.com/lists/oss-security/2023/11/28/2 https://lists.debian.org/debian-lts-announce/2024/01/msg00001.html Common Vulnerability Exposure (CVE) ID: CVE-2024-22029
Copyright	Copyright (C) 2024 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.