elsa-2025-14178

oracle_linux
Description

[1:9.0.87-5.3] - Resolves: tomcat: http/2 'MadeYouReset' DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: tomcat: Denial of service (CVE-2025-52434) - Resolves: tomcat: Denial of service (CVE-2025-52520) - Resolves: tomcat: Denial of service (CVE-2025-53506)

Timeline
Published
unknown
Last Modified
unknown
CVSS Details

CVSS details not available.

Affected Products

No product information available.

References

No references available.

Linked Vulnerabilities

No linked vulnerabilities found.

{
  "cves": [
    "CVE-2025-52520",
    "CVE-2025-48989",
    "CVE-2025-52434",
    "CVE-2025-48988",
    "CVE-2025-48976",
    "CVE-2025-49125",
    "CVE-2025-53506"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "[1:9.0.87-5.3]\n- Resolves:\n  tomcat: http/2 'MadeYouReset' DoS attack through HTTP/2 control frames (CVE-2025-48989)\n- Resolves:\n  tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976)\n- Resolves:\n  tomcat: Dos in multipart upload (CVE-2025-48988)\n- Resolves:\n  tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125)\n- Resolves:\n  tomcat: Denial of service (CVE-2025-52434)\n- Resolves:\n  tomcat: Denial of service (CVE-2025-52520)\n- Resolves:\n  tomcat: Denial of service (CVE-2025-53506)",
  "id": "ELSA-2025-14178",
  "ovalId": "oval:com.oracle.elsa:def:202514178",
  "source": "oracle_linux",
  "title": "ELSA-2025-14178:  tomcat9 security update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2025-14178.html"
}
View JSON API Download JSON