Description
Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache Tomcat when creating unix domain sockets allows an unauthorised local user to access the unix domain socket. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.42 through 9.0.120. Users are recommended to upgrade to version 11.0.25, 10.1.58, 9.0.121, which fixes the issue.
Mitigation
Minimal update. May introduce new vulnerabilities or breaking changes.
|
 debian 12 | | =10.1.10-1 || =10.1.13-1 || =10.1.14-1 || =10.1.15-1 || =10.1.16-1 || =10.1.20-1 || =10.1.23-1 || =10.1.25-1 || =10.1.25-1~bpo12+1 || =10.1.25-2 || =10.1.30-1 || =10.1.30-1~bpo12+1 || =10.1.31-1 || =10.1.33-1 || =10.1.33-1~bpo12+1 || =10.1.34-0+deb12u1 || =10.1.34-0+deb12u2 || =10.1.34-1 || =10.1.35-1 || =10.1.40-1 || =10.1.40-1~bpo12+1 || =10.1.46-1 || =10.1.52-1 || =10.1.52-1~deb12u1 || =10.1.52-1~deb13u1 || =10.1.52-2 || =10.1.54-1 || =10.1.55-1 || =10.1.55-1~deb12u1 || =10.1.55-1~deb13u1 || =10.1.6-1 || =10.1.6-1+deb12u1 || =10.1.6-1+deb12u2 || =10.1.7-1 || =10.1.8-1 || =10.1.9-1 | - |
debian 13 | | =10.1.40-1 || =10.1.46-1 || =10.1.52-1 || =10.1.52-1~deb12u1 || =10.1.52-1~deb13u1 || =10.1.52-2 || =10.1.54-1 || =10.1.55-1 || =10.1.55-1~deb12u1 || =10.1.55-1~deb13u1 | - |
debian 13 | | =11.0.11-1 || =11.0.15-1 || =11.0.15-1~deb13u1 || =11.0.18-1 || =11.0.21-1 || =11.0.22-1 || =11.0.22-1~deb13u1 || =11.0.22-2 || =11.0.24-1 || =11.0.6-1 | - |
debian 14 | | =11.0.11-1 || =11.0.15-1 || =11.0.15-1~deb13u1 || =11.0.18-1 || =11.0.21-1 || =11.0.22-1 || =11.0.22-1~deb13u1 || =11.0.22-2 || =11.0.24-1 || =11.0.6-1 | - |
debian 11 | | =9.0.43-1 || =9.0.43-2 || =9.0.43-2~deb11u1 || =9.0.43-2~deb11u10 || =9.0.43-2~deb11u11 || =9.0.43-2~deb11u12 || =9.0.43-2~deb11u2 || =9.0.43-2~deb11u3 || =9.0.43-2~deb11u4 || =9.0.43-2~deb11u5 || =9.0.43-2~deb11u6 || =9.0.43-2~deb11u7 || =9.0.43-2~deb11u8 || =9.0.43-2~deb11u9 || =9.0.43-3 || =9.0.53-1 || =9.0.54-1 || =9.0.55-1 || =9.0.58-1 || =9.0.62-1 || =9.0.63-1 || =9.0.64-1 || =9.0.64-2 || =9.0.65-1 || =9.0.67-1 || =9.0.68-1 || =9.0.68-1.1 || =9.0.70-1 || >=0 <9.0.70-2 | 9.0.70-2 |
debian 12 | | | 9.0.70-2 |
debian 13 | | | 9.0.70-2 |
debian 14 | | | 9.0.70-2 |
debian 14 | | =10.1.40-1 || =10.1.46-1 || =10.1.52-1 || =10.1.52-1~deb12u1 || =10.1.52-1~deb13u1 || =10.1.52-2 || =10.1.54-1 || =10.1.55-1 || =10.1.55-1~deb12u1 || =10.1.55-1~deb13u1 | - |
