Red Hat Security Advisory

RHSA-2018:2701

Red Hat JBoss Web Server 3.1.0 Service Pack 5 security and bug fix update

Released 2018-09-12 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat JBoss Web Server 3.1 for RHEL 6 tomcat7-7.0.70-29.ep7.el6, tomcat7-admin-webapps-7.0.70-29.ep7.el6, tomcat7-docs-webapp-7.0.70-29.ep7.el6 +21
Red Hat JBoss Web Server 3.1 for RHEL 7 tomcat7-7.0.70-29.ep7.el7, tomcat7-admin-webapps-7.0.70-29.ep7.el7, tomcat7-docs-webapp-7.0.70-29.ep7.el7 +21

Fixes 1 record

TI-2018-01237 CVE-2018-1336 · GHSA-m59c-jpc8-m2x4

Infinite loop in Apache Tomcat

MEDIUM 58

An improper handing of overflow in the UTF-8 decoder with supplementary characters can lead to an infinite loop in the decoder causing a Denial of Service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.20354 Published 2018-08-02 Partial fix · 9.0.8, 8.5.31 +2 CWE-835