Red Hat Security AdvisoryRHSA-2014:0686
tomcat security update
Released 2014-06-10 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) tomcat-7.0.42-5.el7_0, tomcat-servlet-3.0-api-7.0.42-5.el7_0
- Red Hat Enterprise Linux Client Optional (v. 7) tomcat-7.0.42-5.el7_0, tomcat-admin-webapps-7.0.42-5.el7_0, tomcat-docs-webapp-7.0.42-5.el7_0 +6
- Red Hat Enterprise Linux ComputeNode (v. 7) tomcat-7.0.42-5.el7_0, tomcat-servlet-3.0-api-7.0.42-5.el7_0
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) tomcat-7.0.42-5.el7_0, tomcat-admin-webapps-7.0.42-5.el7_0, tomcat-docs-webapp-7.0.42-5.el7_0 +6
- Red Hat Enterprise Linux Server (v. 7) tomcat-7.0.42-5.el7_0, tomcat-admin-webapps-7.0.42-5.el7_0, tomcat-el-2.2-api-7.0.42-5.el7_0 +4
- Red Hat Enterprise Linux Server Optional (v. 7) tomcat-7.0.42-5.el7_0, tomcat-admin-webapps-7.0.42-5.el7_0, tomcat-docs-webapp-7.0.42-5.el7_0 +6
- Red Hat Enterprise Linux Workstation (v. 7) tomcat-7.0.42-5.el7_0, tomcat-admin-webapps-7.0.42-5.el7_0, tomcat-el-2.2-api-7.0.42-5.el7_0 +4
- Red Hat Enterprise Linux Workstation Optional (v. 7) tomcat-docs-webapp-7.0.42-5.el7_0, tomcat-javadoc-7.0.42-5.el7_0, tomcat-jsvc-7.0.42-5.el7_0
Fixes 3 records
Priority MEDIUM 43
Apache Tomcat before 6.0.39, 7.x before 7.0.47, and 8.x before 8.0.0-RC3, when an HTTP connector or AJP connector is used, does not properly handle certain inconsistent HTTP request headers, which allows remote attackers…
CVSS 2.0MEDIUM 5.8· Network · No auth · Interaction — · EPSS 0.16206 · Published 2014-02-26 · Partial fix · 6.0.39, 7.0.47 +1 CWE-20
Priority LOW 38
Apache Tomcat before 6.0.39, 7.x before 7.0.50, and 8.x before 8.0.0-RC10 processes chunked transfer coding without properly handling (1) a large total amount of chunked data or (2) whitespace characters in an HTTP heade…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.09095 · Published 2014-02-26 · Partial fix · 6.0.39, 7.0.50 +1 CWE-20
Priority LOW 27
A certain tomcat7 package for Apache Tomcat 7 in Red Hat Enterprise Linux (RHEL) 7 allows remote attackers to cause a denial of service (CPU consumption) via a crafted request.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02436 · Published 2014-06-14 · Fixed
