CVE-2024-24549 | Apache Tomcat up to 8.5.98/9.0.85/10.1.18/11.0.0-M16 HTTP/2 Request denial of service

A vulnerability was found in Apache Tomcat up to 8.5.98/9.0.85/10.1.18/11.0.0-M16. It has been classified as problematic. Affected is an unknown function of the component HTTP2 Request Handler. The manipulation leads to denial of service.

This vulnerability is traded as CVE-2024-24549. It is possible to launch the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.