CVE-2023-28709 is a high-severity vulnerability affecting certain versions of Apache Tomcat, a widely-used web server software. It is related to an incomplete fix for a previous vulnerability. Users are advised to upgrade to the latest versions to mitigate the risk.

How do I know if I'm affected?

If you're using Apache Tomcat, you might be affected by the vulnerability. This issue can lead to a denial of service attack and impacts specific versions of Apache Tomcat: 11.0.0-M2 to 11.0.0-M4, 10.1.5 to 10.1.7, 9.0.71 to 9.0.73, and 8.5.85 to 8.5.87. To check if you're affected, verify which version of Apache Tomcat you're using. If it falls within these ranges, you may be at risk.

What should I do if I'm affected?

If you're affected by the vulnerability, it's crucial to upgrade your Apache Tomcat to a secure version. Follow these steps: for Tomcat 11.0.0, upgrade to 11.0.0-M5 or later; for Tomcat 10.1.x, upgrade to 10.1.8 or later; for Tomcat 9.0.x, upgrade to 9.0.74 or later; and for Tomcat 8.5.x, upgrade to 8.5.88 or later. This will help protect your system from potential denial of service attacks.

Is this in CISA’s Known Exploited Vulnerabilities Catalog?

The CVE-2023-28709 vulnerability is not listed in CISA's Known Exploited Vulnerabilities Catalog. To protect your system, it's important to upgrade to a secure version of Apache Tomcat as mentioned in previous sections.

Weakness enumeration

The weakness enumeration for this vulnerability is categorized as CWE-193, referring to an off-by-one error. This vulnerability in Apache Tomcat can lead to a denial of service if exploited.

For more details

CVE-2023-28709 is a high-severity vulnerability in Apache Tomcat that can lead to denial of service attacks. To protect your system, ensure you're using a secure version of Apache Tomcat and stay informed about updates and mitigations. For a comprehensive understanding of this vulnerability, including its description, severity, technical details, and known affected software configurations, visit the NVD page or refer to the links below.

• OSS Security -Apache Tomcat

• Apache Mail Archives -Apache Tomcat

• Gentoo Security - Apache Tomcat: Multiple Vulnerabilities

• NetApp Product Security - Apache Tomcat Vulnerability