certfr_avis - certfr-2023-avi-0295

CERTFR-2023-AVI-0295

Vulnerability from certfr_avis

Une vulnérabilité a été découverte dans IBM WebSphere. Elle permet à un attaquant de provoquer un déni de service à distance.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

	Vendor	Product	Description
	IBM	WebSphere	IBM WebSphere Remote Server versions 9.0 et 8.5 sans les correctifs évoqués dans le bulletin de sécurité IBM 6982047 du 06 avril 2023
	IBM	WebSphere	IBM WebSphere Hybrid Edition version 5.1 sans les correctifs évoqués dans le bulletin de sécurité IBM 6982047 du 06 avril 2023

References

Title

Publication Time

Tags

Bulletin de sécurité IBM 6982141 du 07 avril 2023	None	vendor-advisory
Bulletin de sécurité IBM 6982539 du 10 avril 2023	None	vendor-advisory
Avis CERT-FR CERTFR-2023-AVI-0290 du 07 avril 2023	-	other
Bulletin de sécurité IBM 6982047 du 06 avril 2023	-	other

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "IBM WebSphere Remote Server versions 9.0 et 8.5 sans les correctifs \u00e9voqu\u00e9s dans le bulletin de s\u00e9curit\u00e9 IBM 6982047 du 06 avril 2023",
      "product": {
        "name": "WebSphere",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "IBM WebSphere Hybrid Edition version 5.1 sans les correctifs \u00e9voqu\u00e9s dans le bulletin de s\u00e9curit\u00e9 IBM 6982047 du 06 avril 2023",
      "product": {
        "name": "WebSphere",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2023-24998",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-24998"
    }
  ],
  "initial_release_date": "2023-04-11T00:00:00",
  "last_revision_date": "2023-04-11T00:00:00",
  "links": [
    {
      "title": "Avis CERT-FR CERTFR-2023-AVI-0290 du 07 avril 2023",
      "url": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2023-AVI-0290/"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 6982047 du 06 avril 2023",
      "url": "https://www.ibm.com/support/pages/node/6982047"
    }
  ],
  "reference": "CERTFR-2023-AVI-0295",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2023-04-11T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans IBM WebSphere. Elle permet \u00e0 un\nattaquant de provoquer un d\u00e9ni de service \u00e0 distance.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans IBM WebSphere",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 6982141 du 07 avril 2023",
      "url": "https://www.ibm.com/support/pages/node/6982141"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 6982539 du 10 avril 2023",
      "url": "https://www.ibm.com/support/pages/node/6982539"
    }
  ]
}

CVE-2023-24998 (GCVE-0-2023-24998)

Vulnerability from cvelistv5

Published

2023-02-20 15:57

Modified

2025-11-03 21:47

Severity ?

CWE

CWE-770 - Allocation of Resources Without Limits or Throttling

Summary

Apache Commons FileUpload before 1.5 does not limit the number of request parts to be processed resulting in the possibility of an attacker triggering a DoS with a malicious upload or series of uploads. Note that, like all of the file upload limits, the new configuration option (FileUploadBase#setFileCountMax) is not enabled by default and must be explicitly configured.

References

URL

Tags

	https://lists.apache.org/thread/4xl4l09mhwg4vgsk7dxqogcjrobrrdoy	vendor-advisory
	http://www.openwall.com/lists/oss-security/2023/05/22/1
	https://security.gentoo.org/glsa/202305-37
	https://www.debian.org/security/2023/dsa-5522
	https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html

Impacted products

Vendor

Product

Version

Apache Software Foundation

Apache Commons FileUpload

Version: 0 ≤

Apache Software Foundation

Apache Tomcat

Version: 11.0.0-M1
Version: 10.0.0-M1   ≤ 10.1.4
Version: 9.0.0-M1   ≤ 9.0.70
Version: 8.5.0   ≤ 8.5.84

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:47:24.224Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://security.netapp.com/advisory/ntap-20230302-0013/"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread/4xl4l09mhwg4vgsk7dxqogcjrobrrdoy"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/05/22/1"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202305-37"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5522"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/07/msg00008.html"
          },
          {
            "url": "https://security.netapp.com/advisory/ntap-20241108-0002/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Apache Commons FileUpload",
          "vendor": "Apache Software Foundation",
          "versions": [
            {
              "lessThan": "1.5",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Apache Tomcat",
          "vendor": "Apache Software Foundation",
          "versions": [
            {
              "status": "affected",
              "version": "11.0.0-M1"
            },
            {
              "lessThanOrEqual": "10.1.4",
              "status": "affected",
              "version": "10.0.0-M1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "9.0.70",
              "status": "affected",
              "version": "9.0.0-M1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.5.84",
              "status": "affected",
              "version": "8.5.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Jakob Ackermann"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cdiv\u003eApache Commons FileUpload before 1.5 does not limit the number of request parts to be processed resulting in the possibility of an attacker triggering a DoS with a malicious upload or series of uploads.\u003c/div\u003e\u003cdiv\u003e\u003cbr\u003e\u003c/div\u003e\u003cdiv\u003eNote that, like all of the file upload limits, the\n          new configuration option (FileUploadBase#setFileCountMax) is not\n          enabled by default and must be explicitly configured.\u003cbr\u003e\u003c/div\u003e"
            }
          ],
          "value": "Apache Commons FileUpload before 1.5 does not limit the number of request parts to be processed resulting in the possibility of an attacker triggering a DoS with a malicious upload or series of uploads.\n\n\n\n\nNote that, like all of the file upload limits, the\n          new configuration option (FileUploadBase#setFileCountMax) is not\n          enabled by default and must be explicitly configured."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "text": "important"
            },
            "type": "Textual description of severity"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-770",
              "description": "CWE-770 Allocation of Resources Without Limits or Throttling",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-10-13T15:06:16.472Z",
        "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
        "shortName": "apache"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.apache.org/thread/4xl4l09mhwg4vgsk7dxqogcjrobrrdoy"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/05/22/1"
        },
        {
          "url": "https://security.gentoo.org/glsa/202305-37"
        },
        {
          "url": "https://www.debian.org/security/2023/dsa-5522"
        },
        {
          "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Apache Commons FileUpload, Apache Tomcat: FileUpload DoS with excessive parts",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
    "assignerShortName": "apache",
    "cveId": "CVE-2023-24998",
    "datePublished": "2023-02-20T15:57:07.372Z",
    "dateReserved": "2023-02-01T10:32:05.492Z",
    "dateUpdated": "2025-11-03T21:47:24.224Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

CERTFR-2023-AVI-0295

Vulnerability from certfr_avis

Solution

CVE-2023-24998 (GCVE-0-2023-24998)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature