Red Hat Security Advisory

RHSA-2018:0466

Red Hat JBoss Web Server 3.1.0 Service Pack 2 security update

Released 2018-03-07 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat JBoss Web Server 3.1 for RHEL 6 mod_cluster-1.3.8-2.Final_redhat_2.1.ep7.el6, mod_cluster-tomcat7-1.3.8-2.Final_redhat_2.1.ep7.el6, mod_cluster-tomcat8-1.3.8-2.Final_redhat_2.1.ep7.el6 +28
Red Hat JBoss Web Server 3.1 for RHEL 7 mod_cluster-1.3.8-2.Final_redhat_2.1.ep7.el7, mod_cluster-tomcat7-1.3.8-2.Final_redhat_2.1.ep7.el7, mod_cluster-tomcat8-1.3.8-2.Final_redhat_2.1.ep7.el7 +28

Fixes 7 records

TI-2017-09342 CVE-2017-12617 · GHSA-xjgh-84hx-56c5

Unrestricted file upload in Apache Tomcat

CRITICAL 94KEV

When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.99968 Published 2017-10-03 Partial fix · 9.0.1, 8.5.23 +2 CWE-434

TI-2017-09340 CVE-2017-12615 · GHSA-pjfr-qf3p-3q25

Unrestricted file upload in Apache Tomcat

CRITICAL 94KEV

When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.99707 Published 2017-09-19 Fixed in 7.0.79 CWE-434

TI-2017-09341 CVE-2017-12616 · GHSA-8qq4-8jvq-mfw4

Information disclosure in Apache Tomcat

HIGH 76

When using a VirtualDirContext with Apache Tomcat 7.0.0 to 7.0.80 it was possible to bypass security constraints and/or view the source code of JSPs for resources served by the VirtualDirContext using a specially crafted…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.70118 Published 2017-09-19 Partial fix · 7.0.81 CWE-200

TI-2018-01207 CVE-2018-1304 · GHSA-6rxj-58jh-436r

The URL pattern of "" (the empty string) which exactly maps to the context root was not…

MEDIUM 49

The URL pattern of "" (the empty string) which exactly maps to the context root was not correctly handled in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 to 8.0.49 and 7.0.0 to 7.0.84 when used as part of…

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.1707 Published 2018-02-28 Partial fix · 9.0.5, 8.5.28 +2

TI-2018-01208 CVE-2018-1305 · GHSA-jx6h-3fjx-cgv5

Security constraints defined by annotations of Servlets in Apache Tomcat 9.0.0.M1 to…

MEDIUM 44

Security constraints defined by annotations of Servlets in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 to 8.0.49 and 7.0.0 to 7.0.84 were only applied once a Servlet had been loaded.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.14472 Published 2018-02-23 Partial fix · 9.0.5, 8.5.28 +1

TI-2017-09338 CVE-2017-12613 · GHSA-v99m-xvmc-cgf3

Out-of-bounds read in Apache Portable Runtime

LOW 35

When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an apr_t…

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.01749 Published 2017-10-24 Partial fix CWE-125

TI-2017-11472 CVE-2017-15698 · GHSA-ppg5-72hh-9jj4

Improper certificate validation in Apache Tomcat Native

LOW 33

When parsing the AIA-Extension field of a client certificate, Apache Tomcat Native Connector 1.2.0 to 1.2.14 and 1.1.23 to 1.1.34 did not correctly handle fields longer than 127 bytes.

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.03527 Published 2018-01-31 Partial fix CWE-295