ID de Prueba:	1.3.6.1.4.1.25623.1.0.813724
Categoría:	Web Servers
Título:	Apache Tomcat 'UTF-8 Decoder' Denial of Service Vulnerability - Windows
Resumen:	Apache Tomcat is prone to a denial of service (DoS) vulnerability.
Descripción:	Summary: Apache Tomcat is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: The flaw exists due to improper handing of overflow in the UTF-8 decoder with supplementary characters. Vulnerability Impact: Successful exploitation will allow an attacker to conduct a denial-of-service condition. Affected Software/OS: Apache Tomcat 9.0.0.M9 to 9.0.7 Apache Tomcat 8.5.0 to 8.5.30 Apache Tomcat 8.0.0.RC1 to 8.0.51 Apache Tomcat 7.0.28 to 7.0.86 on Windows. Solution: Upgrade to Apache Tomcat version 9.0.8 or 8.5.31 or 8.0.52 or 7.0.90 or later. Please see the references for more information. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2018-1336 BugTraq ID: 104898 http://www.securityfocus.com/bid/104898 Debian Security Information: DSA-4281 (Google Search) https://www.debian.org/security/2018/dsa-4281 https://www.oracle.com/security-alerts/cpuapr2020.html https://lists.debian.org/debian-lts-announce/2018/09/msg00001.html https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/e85e83e9954f169bbb77b44baae5a33d8de878df557bb32b7f793661@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0@%3Cdev.tomcat.apache.org%3E http://mail-archives.us.apache.org/mod_mbox/www-announce/201807.mbox/%3C20180722090435.GA60759%40minotaur.apache.org%3E RedHat Security Advisories: RHEA-2018:2188 https://access.redhat.com/errata/RHEA-2018:2188 RedHat Security Advisories: RHEA-2018:2189 https://access.redhat.com/errata/RHEA-2018:2189 RedHat Security Advisories: RHSA-2018:2700 https://access.redhat.com/errata/RHSA-2018:2700 RedHat Security Advisories: RHSA-2018:2701 https://access.redhat.com/errata/RHSA-2018:2701 RedHat Security Advisories: RHSA-2018:2740 https://access.redhat.com/errata/RHSA-2018:2740 RedHat Security Advisories: RHSA-2018:2741 https://access.redhat.com/errata/RHSA-2018:2741 RedHat Security Advisories: RHSA-2018:2742 https://access.redhat.com/errata/RHSA-2018:2742 RedHat Security Advisories: RHSA-2018:2743 https://access.redhat.com/errata/RHSA-2018:2743 RedHat Security Advisories: RHSA-2018:2921 https://access.redhat.com/errata/RHSA-2018:2921 RedHat Security Advisories: RHSA-2018:2930 https://access.redhat.com/errata/RHSA-2018:2930 RedHat Security Advisories: RHSA-2018:2939 https://access.redhat.com/errata/RHSA-2018:2939 RedHat Security Advisories: RHSA-2018:2945 https://access.redhat.com/errata/RHSA-2018:2945 RedHat Security Advisories: RHSA-2018:3768 https://access.redhat.com/errata/RHSA-2018:3768 http://www.securitytracker.com/id/1041375 https://usn.ubuntu.com/3723-1/
Copyright	Copyright (C) 2018 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.