Test ID:	1.3.6.1.4.1.25623.1.0.887253
Category:	Fedora Local Security Checks
Title:	Fedora: Security Advisory (FEDORA-2024-c404b99f19)
Summary:	The remote host is missing an update for the 'tomcat' package(s) announced via the FEDORA-2024-c404b99f19 advisory.
Description:	Summary: The remote host is missing an update for the 'tomcat' package(s) announced via the FEDORA-2024-c404b99f19 advisory. Vulnerability Insight: This update includes a rebase from 9.0.83 to 9.0.89. * [#2269611]([link moved to references]) CVE-2024-24549 tomcat: CVE-2024-24549: Apache Tomcat: HTTP/2 header handling DoS * [#2269612]([link moved to references]) CVE-2024-23672 tomcat: Apache Tomcat: WebSocket DoS with incomplete closing handshake Affected Software/OS: 'tomcat' package(s) on Fedora 40. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2024-23672 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/736G4GPZWS2DSQO5WKXO3G6OMZKFEK55/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3UWIS5MMGYDZBLJYT674ZI5AWFHDZ46B/ https://lists.apache.org/thread/cmpswfx6tj4s7x0nxxosvfqs11lvdx2f https://lists.debian.org/debian-lts-announce/2024/04/msg00001.html http://www.openwall.com/lists/oss-security/2024/03/13/4 Common Vulnerability Exposure (CVE) ID: CVE-2024-24549 https://lists.apache.org/thread/4c50rmomhbbsdgfjsgwlb51xdwfjdcvg http://www.openwall.com/lists/oss-security/2024/03/13/3
Copyright	Copyright (C) 2024 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.