Test Kennung:	1.3.6.1.4.1.25623.1.0.813724
Kategorie:	Web Servers
Titel:	Apache Tomcat 'UTF-8 Decoder' Denial of Service Vulnerability - Windows
Zusammenfassung:	Apache Tomcat is prone to a denial of service (DoS) vulnerability.
Beschreibung:	Summary: Apache Tomcat is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: The flaw exists due to improper handing of overflow in the UTF-8 decoder with supplementary characters. Vulnerability Impact: Successful exploitation will allow an attacker to conduct a denial-of-service condition. Affected Software/OS: Apache Tomcat 9.0.0.M9 to 9.0.7 Apache Tomcat 8.5.0 to 8.5.30 Apache Tomcat 8.0.0.RC1 to 8.0.51 Apache Tomcat 7.0.28 to 7.0.86 on Windows. Solution: Upgrade to Apache Tomcat version 9.0.8 or 8.5.31 or 8.0.52 or 7.0.90 or later. Please see the references for more information. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2018-1336 BugTraq ID: 104898 http://www.securityfocus.com/bid/104898 Debian Security Information: DSA-4281 (Google Search) https://www.debian.org/security/2018/dsa-4281 https://www.oracle.com/security-alerts/cpuapr2020.html https://lists.debian.org/debian-lts-announce/2018/09/msg00001.html https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/e85e83e9954f169bbb77b44baae5a33d8de878df557bb32b7f793661@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0@%3Cdev.tomcat.apache.org%3E http://mail-archives.us.apache.org/mod_mbox/www-announce/201807.mbox/%3C20180722090435.GA60759%40minotaur.apache.org%3E RedHat Security Advisories: RHEA-2018:2188 https://access.redhat.com/errata/RHEA-2018:2188 RedHat Security Advisories: RHEA-2018:2189 https://access.redhat.com/errata/RHEA-2018:2189 RedHat Security Advisories: RHSA-2018:2700 https://access.redhat.com/errata/RHSA-2018:2700 RedHat Security Advisories: RHSA-2018:2701 https://access.redhat.com/errata/RHSA-2018:2701 RedHat Security Advisories: RHSA-2018:2740 https://access.redhat.com/errata/RHSA-2018:2740 RedHat Security Advisories: RHSA-2018:2741 https://access.redhat.com/errata/RHSA-2018:2741 RedHat Security Advisories: RHSA-2018:2742 https://access.redhat.com/errata/RHSA-2018:2742 RedHat Security Advisories: RHSA-2018:2743 https://access.redhat.com/errata/RHSA-2018:2743 RedHat Security Advisories: RHSA-2018:2921 https://access.redhat.com/errata/RHSA-2018:2921 RedHat Security Advisories: RHSA-2018:2930 https://access.redhat.com/errata/RHSA-2018:2930 RedHat Security Advisories: RHSA-2018:2939 https://access.redhat.com/errata/RHSA-2018:2939 RedHat Security Advisories: RHSA-2018:2945 https://access.redhat.com/errata/RHSA-2018:2945 RedHat Security Advisories: RHSA-2018:3768 https://access.redhat.com/errata/RHSA-2018:3768 http://www.securitytracker.com/id/1041375 https://usn.ubuntu.com/3723-1/
Copyright	Copyright (C) 2018 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.