CVE-2024-21733

tomcat9: tomcat9 - security update

CVE-2024-21733 is fixed in 16 products on 1 platform, first by DEBIAN-CVE-2024-21733, released January 19, 2024. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
5.3
medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.1429
96th percentile

tomcat9 - security update

Where it's fixed

ProductFixed inFixReleased
Linux
libtomcat8-embed-java · Ubuntu 18.04.6 LTS (bionic) 8.5.39-1ubuntu1~18.04.3+esm5 libtomcat8-embed-java 8.5.39-1ubuntu1~18.04.3+esm5 Mar 13, 2024
libtomcat8-java · Ubuntu 18.04.6 LTS (bionic) 8.5.39-1ubuntu1~18.04.3+esm5 libtomcat8-java 8.5.39-1ubuntu1~18.04.3+esm5 Mar 13, 2024
libtomcat9-embed-java · Ubuntu 18.04.6 LTS (bionic) 9.0.16-3ubuntu0.18.04.2+esm7 libtomcat9-embed-java 9.0.16-3ubuntu0.18.04.2+esm7 Nov 7, 2024
libtomcat9-embed-java · Ubuntu 20.04 LTS (focal) 9.0.31-1ubuntu0.9+esm2 libtomcat9-embed-java 9.0.31-1ubuntu0.9+esm2 Nov 7, 2024
libtomcat9-java · Ubuntu 18.04.6 LTS (bionic) 9.0.16-3ubuntu0.18.04.2+esm7 libtomcat9-java 9.0.16-3ubuntu0.18.04.2+esm7 Nov 7, 2024
libtomcat9-java · Ubuntu 20.04 LTS (focal) 9.0.31-1ubuntu0.9+esm2 libtomcat9-java 9.0.31-1ubuntu0.9+esm2 Nov 7, 2024
tomcat8 · Ubuntu 18.04.6 LTS (bionic) 8.5.39-1ubuntu1~18.04.3+esm5 tomcat8 8.5.39-1ubuntu1~18.04.3+esm5 Mar 13, 2024
tomcat8-admin · Ubuntu 18.04.6 LTS (bionic) 8.5.39-1ubuntu1~18.04.3+esm5 tomcat8-admin 8.5.39-1ubuntu1~18.04.3+esm5 Mar 13, 2024
tomcat8-common · Ubuntu 18.04.6 LTS (bionic) 8.5.39-1ubuntu1~18.04.3+esm5 tomcat8-common 8.5.39-1ubuntu1~18.04.3+esm5 Mar 13, 2024
tomcat8-docs · Ubuntu 18.04.6 LTS (bionic) 8.5.39-1ubuntu1~18.04.3+esm5 tomcat8-docs 8.5.39-1ubuntu1~18.04.3+esm5 Mar 13, 2024
tomcat8-examples · Ubuntu 18.04.6 LTS (bionic) 8.5.39-1ubuntu1~18.04.3+esm5 tomcat8-examples 8.5.39-1ubuntu1~18.04.3+esm5 Mar 13, 2024
tomcat8-user · Ubuntu 18.04.6 LTS (bionic) 8.5.39-1ubuntu1~18.04.3+esm5 tomcat8-user 8.5.39-1ubuntu1~18.04.3+esm5 Mar 13, 2024
tomcat9 · Debian 11.6 (bullseye) 9.0.43-2~deb11u11 DLA-4017-1 Jan 17, 2025
tomcat9 · Debian 12.15 (bookworm) 9.0.53-1 DEBIAN-CVE-2024-21733 Jan 19, 2024
tomcat9 · Debian 13.5 (trixie) 9.0.53-1 DEBIAN-CVE-2024-21733 Jan 19, 2024
tomcat9 · Debian 14 9.0.53-1 DEBIAN-CVE-2024-21733 Jan 19, 2024
tomcat9 · Ubuntu 18.04.6 LTS (bionic) 9.0.16-3ubuntu0.18.04.2+esm7 tomcat9 9.0.16-3ubuntu0.18.04.2+esm7 Nov 7, 2024
tomcat9 · Ubuntu 20.04 LTS (focal) 9.0.31-1ubuntu0.9+esm2 tomcat9 9.0.31-1ubuntu0.9+esm2 Nov 7, 2024
tomcat9-admin · Ubuntu 18.04.6 LTS (bionic) 9.0.16-3ubuntu0.18.04.2+esm7 tomcat9-admin 9.0.16-3ubuntu0.18.04.2+esm7 Nov 7, 2024
tomcat9-admin · Ubuntu 20.04 LTS (focal) 9.0.31-1ubuntu0.9+esm2 tomcat9-admin 9.0.31-1ubuntu0.9+esm2 Nov 7, 2024
tomcat9-common · Ubuntu 18.04.6 LTS (bionic) 9.0.16-3ubuntu0.18.04.2+esm7 tomcat9-common 9.0.16-3ubuntu0.18.04.2+esm7 Nov 7, 2024
tomcat9-common · Ubuntu 20.04 LTS (focal) 9.0.31-1ubuntu0.9+esm2 tomcat9-common 9.0.31-1ubuntu0.9+esm2 Nov 7, 2024
tomcat9-docs · Ubuntu 18.04.6 LTS (bionic) 9.0.16-3ubuntu0.18.04.2+esm7 tomcat9-docs 9.0.16-3ubuntu0.18.04.2+esm7 Nov 7, 2024
tomcat9-docs · Ubuntu 20.04 LTS (focal) 9.0.31-1ubuntu0.9+esm2 tomcat9-docs 9.0.31-1ubuntu0.9+esm2 Nov 7, 2024
tomcat9-examples · Ubuntu 18.04.6 LTS (bionic) 9.0.16-3ubuntu0.18.04.2+esm7 tomcat9-examples 9.0.16-3ubuntu0.18.04.2+esm7 Nov 7, 2024
tomcat9-examples · Ubuntu 20.04 LTS (focal) 9.0.31-1ubuntu0.9+esm2 tomcat9-examples 9.0.31-1ubuntu0.9+esm2 Nov 7, 2024
tomcat9-user · Ubuntu 18.04.6 LTS (bionic) 9.0.16-3ubuntu0.18.04.2+esm7 tomcat9-user 9.0.16-3ubuntu0.18.04.2+esm7 Nov 7, 2024
tomcat9-user · Ubuntu 20.04 LTS (focal) 9.0.31-1ubuntu0.9+esm2 tomcat9-user 9.0.31-1ubuntu0.9+esm2 Nov 7, 2024

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.