PT-2018-11780 · Apache+5 · Apache Tomcat+5

Publicado 2018-05-04 · Atualizado 2024-06-15 · CVE-2018-1336

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 7.0.28 through 7.0.86 Apache Tomcat versions 8.0.0.RC1 through 8.0.51 Apache Tomcat versions 8.5.0 through 8.5.30 Apache Tomcat versions 9.0.0.M9 through 9.0.7

Description An improper handling of overflow in the UTF-8 decoder with supplementary characters can lead to an infinite loop in the decoder, causing a Denial of Service.

Recommendations For versions 7.0.28 through 7.0.86, update to a version outside of this range to resolve the issue. For versions 8.0.0.RC1 through 8.0.51, update to a version outside of this range to resolve the issue. For versions 8.5.0 through 8.5.30, update to a version outside of this range to resolve the issue. For versions 9.0.0.M9 through 9.0.7, update to a version outside of this range to resolve the issue.

Exploit

Correção

DoS

Infinite Loop

Enumeração de Fraquezas

CWE-835

Identificadores relacionados

ALT-PU-2019-1516

CESA-2018_2921

CVE-2018-1336

DLA-1491-1

DSA-4281-1

GHSA-M59C-JPC8-M2X4

MGASA-2018-0479

OPENSUSE-SU-2018_2740-1

OPENSUSE-SU-2018_3054-1

OPENSUSE-SU-2024:11468-1

OPENSUSE-SU-2024:13441-1

RHSA-2018:2701

RHSA-2018:2741

RHSA-2018:2742

RHSA-2018:2743

RHSA-2018:2921

RHSA-2018_2921

SUSE-SU-2018:2699-1

SUSE-SU-2018:3011-1

SUSE-SU-2018:3261-1

SUSE-SU-2018:3388-1

SUSE-SU-2018_2699-1

SUSE-SU-2018_3011-2

USN-3723-1

USN-4791-1

Produtos afetados

Alt Linux

Apache Tomcat

Centos

Red Hat

Suse

Ubuntu

Referências · 165

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/tomcat_jsp_upload_bypass.rb · Exploit
• 🔥 https://github.com/cyberheartmi9/CVE-2017-12617 · Exploit
• 🔥 https://github.com/Pa55w0rd/CVE-2018-1305 · Exploit
• 🔥 https://github.com/wotmd/VirtualBox-6.0.0-Exploit-1-day · Exploit
• 🔥 https://github.com/LongWayHomie/CVE-2017-12617 · Exploit
• 🔥 https://github.com/knqyf263/CVE-2018-1304 · Exploit
• https://github.com/apache/tomcat · Nota
• https://github.com/apache/tomcat/commit/156d76a6afeef440d14044a560d6ad1d029361c4 · Nota
• https://github.com/apache/tomcat/commit/92cd494555598e99dd691712e8ee426a2f9c2e93 · Nota
• https://github.com/apache/tomcat/commit/e00812b94e5830b2be3de04f4ae4ade38a700074 · Nota
• https://github.com/apache/tomcat80/commit/9e9b7fe1b5732277a26e437f1d32155de6208ef2 · Nota
• https://support.f5.com/csp/article/K73008537?utm_source=f5support&amp%3Butm_medium=RSS · Nota
• https://suse.com/security/cve/CVE-2022-42252 · Nota
• https://osv.dev/vulnerability/MGASA-2018-0479 · Aviso do Fabricante
• https://tomcat.apache.org/security-8 · Nota