Apache · Apache Tomcat · CVE-2017-6056
**Name of the Vulnerable Software and Affected Versions**
Apache Tomcat versions prior to 7.0.56-3+deb8u8
Apache Tomcat versions prior to 8.0.14-1+deb8u7
**Description**
A programming error in the processing of HTTPS requests in the Apache Tomcat servlet and JSP engine may result in denial of service via an infinite loop. This issue is a consequence of backporting a fix but not backporting another necessary fix.
**Recommendations**
For versions prior to 7.0.56-3+deb8u8, update to version 7.0.56-3+deb8u8 or later.
For versions prior to 8.0.14-1+deb8u7, update to version 8.0.14-1+deb8u7 or later.