Red Hat Security AdvisoryRHSA-2012:0475
tomcat6 security update
Released 2012-04-11 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop Optional (v. 6) tomcat6-6.0.24-36.el6_2, tomcat6-admin-webapps-6.0.24-36.el6_2, tomcat6-docs-webapp-6.0.24-36.el6_2 +6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) tomcat6-6.0.24-36.el6_2, tomcat6-admin-webapps-6.0.24-36.el6_2, tomcat6-docs-webapp-6.0.24-36.el6_2 +6
- Red Hat Enterprise Linux Server (v. 6) tomcat6-6.0.24-36.el6_2, tomcat6-el-2.1-api-6.0.24-36.el6_2, tomcat6-jsp-2.1-api-6.0.24-36.el6_2 +2
- Red Hat Enterprise Linux Server Optional (v. 6) tomcat6-6.0.24-36.el6_2, tomcat6-admin-webapps-6.0.24-36.el6_2, tomcat6-docs-webapp-6.0.24-36.el6_2 +2
- Red Hat Enterprise Linux Workstation (v. 6) tomcat6-6.0.24-36.el6_2, tomcat6-el-2.1-api-6.0.24-36.el6_2, tomcat6-jsp-2.1-api-6.0.24-36.el6_2 +2
- Red Hat Enterprise Linux Workstation Optional (v. 6) tomcat6-6.0.24-36.el6_2, tomcat6-admin-webapps-6.0.24-36.el6_2, tomcat6-docs-webapp-6.0.24-36.el6_2 +2
Fixes 2 records
Priority MEDIUM 63
Apache Tomcat before 5.5.35, 6.x before 6.0.35, and 7.x before 7.0.23 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to caus…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.79713 · Published 2012-01-05 · Fixed in 5.5.35, 6.0.35 +1 CWE-399
Priority LOW 36
Apache Tomcat 5.5.x before 5.5.35, 6.x before 6.0.34, and 7.x before 7.0.23 uses an inefficient approach for handling parameters, which allows remote attackers to cause a denial of service (CPU consumption) via a request…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.10478 · Published 2012-01-19 · Fixed in 5.5.35, 6.0.34 +1 CWE-189
