Staging Environment: Content and features may be unstable or change without notice.
Advisory details: vulnrichment / CVE-2023-28709
Advisory ID vulnrichment/CVE-2023-28709
Aliases
Summary The fix for CVE-2023-24998 was incomplete for Apache Tomcat 11.0.0-M2 to 11.0.0-M4, 10.1.5 to 10.1.7, 9.0.71 to 9.0.73 and 8.5.85 to 8.5.87. If non-default HTTP connector settings were used such that the maxParameterCount could be reached using query string parameters and a request was submitted that supplied exactly maxParameterCount parameters in the query string, the limit for uploaded request parts could be bypassed with the potential for a denial of service to occur.
Status Published
Exploitability 0.5
Weighted Severity 0.0
Risk
Affected and Fixed Packages Package Details
Introduced and Fixed Package Commit Patches Package Commit Patches Details
Weaknesses (1)
CWE-193 Off-by-one Error
System Score Found at
ssvc Track
Reference id Reference type URL
https://lists.apache.org/thread/7wvxonzwb7k9hx9jt3q33cmy7j97jo3j
https://security.gentoo.org/glsa/202305-37
https://www.debian.org/security/2023/dsa-5521
http://www.openwall.com/lists/oss-security/2023/05/22/1
ntap-20230616-0004 Other https://security.netapp.com/advisory/ntap-20230616-0004/
No exploits are available.

No EPSS data available for this advisory.

Patch URL
There are no known patches.
Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:15:57Z/ Found at None

Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:15:57Z/

Decision: Track

Source URL: https://github.com/cisagov/vulnrichment/blob/develop/2023/28xxx/CVE-2023-28709.json

Source Advisory: vulnrichment/CVE-2023-28709

View SSVC decision tree 
[{'Exploitation': 'none'},
 {'Automatable': 'yes'},
 {'Technical Impact': 'partial'},
 {'Mission Prevalence': 'minimal'},
 {'Public Well-being Impact': 'material'},
 {'Mission & Well-being': 'medium'}]