Description

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Apache Tomcat when using the APR/Native connector. This was particularly noticeable with client initiated closes of HTTP/2 connections. This issue affects Apache Tomcat: from 9.0.0.M1 through 9.0.106. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0 through 8.5.100. Other, older, EOL versions may also be affected. Users are recommended to upgrade to version 9.0.107, which fixes the issue.

INFO

Published Date :

2025-07-10T19:03:47.225Z

Last Modified :

2025-11-04T21:11:38.474Z

Source :

apache
AFFECTED PRODUCTS

The following products are affected by CVE-2025-52434 vulnerability.

Vendors Products
Apache
  • Tomcat
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-52434.

URL Resource
http://www.openwall.com/lists/oss-security/2025/07/10/11 cve-icon
https://lists.apache.org/thread/gxgh65004f25y8519coth6w7vchww030 cve-icon cve-icon cve-icon
https://lists.debian.org/debian-lts-announce/2025/07/msg00009.html cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-52434 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-52434 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact