Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
oraclelinuxOracleLinuxELSA-2017-0527
HistoryMar 15, 2017 - 12:00 a.m.

tomcat6 security update

2017-03-1500:00:00
linux.oracle.com
35

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.009 Low

EPSS

Percentile

81.0%

JSON

[0:6.0.24-105]

  • Related: rhbz#1402664 CVE-2016-6816 Adding system property from asfbz-60594 to allow use of some un-encoded characters
  • Related: rhbz#1402664 CVE-2016-6816 Resolving a security regression (2017-6056) caused by CVE-2016-6816
    [0:6.0.24-104]
  • Related: rhbz#1402664 build. reverting ExcludeArch to fix composes
    [0:6.0.24-102]
  • Resolves: rhbz#1413589 CVE-2016-8745 tomcat6: tomcat: information disclosure due to incorrect Processor sharing
  • Resolves: rhbz#1402664 CVE-2016-6816 tomcat6: tomcat: HTTP Request smuggling vulnerability due to permitting invalid character in HTTP requests
OSVersionArchitecturePackageVersionFilename
oracle linux6srctomcat6< 6.0.24-105.el6_8tomcat6-6.0.24-105.el6_8.src.rpm
oracle linux6noarchtomcat6< 6.0.24-105.el6_8tomcat6-6.0.24-105.el6_8.noarch.rpm
oracle linux6noarchtomcat6-admin-webapps< 6.0.24-105.el6_8tomcat6-admin-webapps-6.0.24-105.el6_8.noarch.rpm
oracle linux6noarchtomcat6-docs-webapp< 6.0.24-105.el6_8tomcat6-docs-webapp-6.0.24-105.el6_8.noarch.rpm
oracle linux6noarchtomcat6-el-2.1-api< 6.0.24-105.el6_8tomcat6-el-2.1-api-6.0.24-105.el6_8.noarch.rpm
oracle linux6noarchtomcat6-javadoc< 6.0.24-105.el6_8tomcat6-javadoc-6.0.24-105.el6_8.noarch.rpm
oracle linux6noarchtomcat6-jsp-2.1-api< 6.0.24-105.el6_8tomcat6-jsp-2.1-api-6.0.24-105.el6_8.noarch.rpm
oracle linux6noarchtomcat6-lib< 6.0.24-105.el6_8tomcat6-lib-6.0.24-105.el6_8.noarch.rpm
oracle linux6noarchtomcat6-servlet-2.5-api< 6.0.24-105.el6_8tomcat6-servlet-2.5-api-6.0.24-105.el6_8.noarch.rpm
oracle linux6noarchtomcat6-webapps< 6.0.24-105.el6_8tomcat6-webapps-6.0.24-105.el6_8.noarch.rpm
Rows per page:
1-10 of 201

Related

nessus 46
redhat 10
openvas 28
amazon 5
centos 2
debian 8
oraclelinux 1
osv 8
redhatcve 2
mageia 2
tomcat 10
cve 3
ibm 28
f5 4
ubuntucve 3
freebsd 2
fedora 5
github 2
veracode 3
prion 3
debiancve 3
exploitpack 1
packetstorm 1
seebug 1
zdt 1
atlassian 4
exploitdb 1
suse 8
archlinux 1
ubuntu 3
nessus
nessus
CentOS 6 : tomcat6 (CESA-2017:0527)
2017-03-20 00:00:00
EulerOS 2.0 SP1 : tomcat (EulerOS-SA-2017-1081)
2017-05-03 00:00:00
Oracle Linux 6 : tomcat6 (ELSA-2017-0527)
2017-03-16 00:00:00
redhat
redhat
(RHSA-2017:0935) Moderate: tomcat security update
2017-04-12 13:36:04
(RHSA-2017:0527) Moderate: tomcat6 security update
2017-03-15 12:06:21
(RHSA-2017:0250) Important: jboss-ec2-eap security, bug fix, and enhancement update
2017-02-02 20:54:34
openvas
openvas
CentOS Update for tomcat CESA-2017:0935 centos7
2017-04-14 00:00:00
RedHat Update for tomcat RHSA-2017:0935-01
2017-04-13 00:00:00
Huawei EulerOS: Security Advisory for tomcat (EulerOS-SA-2017-1081)
2020-01-23 00:00:00
amazon
amazon
Medium: tomcat6
2017-03-29 16:48:00
Medium: tomcat7, tomcat8
2017-02-14 12:00:00
Important: tomcat6
2016-12-15 00:41:00
centos
centos
tomcat security update
2017-04-13 11:00:11
tomcat6 security update
2017-03-17 14:19:39
debian
debian
[SECURITY] [DLA 779-1] tomcat7 security update
2017-01-10 23:37:14
[SECURITY] [DSA 3754-1] tomcat7 security update
2017-01-08 06:26:59
[SECURITY] [DSA 3755-1] tomcat8 security update
2017-01-08 06:27:45
oraclelinux
oraclelinux
tomcat security update
2017-04-12 00:00:00
osv
osv
tomcat8 - security update
2017-01-08 00:00:00
Concurrent Execution using Shared Resource with Improper Synchronization in Apache Tomcat
2022-05-14 01:10:16
tomcat7 - security update
2017-01-08 00:00:00
redhatcve
redhatcve
CVE-2016-8745
2016-12-12 12:48:37
CVE-2016-6816
2021-07-11 07:51:46
mageia
mageia
Updated tomcat packages fix security vulnerability
2017-02-19 00:05:27
Updated tomcat package fixes security vulnerabilities
2016-12-12 01:44:05
tomcat
tomcat
Fixed in Apache Tomcat 7.0.75
2017-01-24 00:00:00
Fixed in Apache Tomcat 9.0.0.M15
2016-12-08 00:00:00
Fixed in Apache Tomcat 8.0.41
2017-01-24 00:00:00
cve
cve
CVE-2016-8745
2017-08-10 22:29:00
CVE-2016-6816
2017-03-20 18:59:00
CVE-2017-6056
2017-02-17 07:59:00
ibm
ibm
Security Bulletin: Vulnerability in Apache Tomcat affects IBM Algo One - Algo Risk Application (CVE-2016-8745)
2018-06-15 22:49:25
Security Bulletin: Vulnerability in Apache Tomcat affects IBM Algo One - Core (CVE-2016-8745)
2018-06-15 22:49:47
Security Bulletin: Apache Tomcat vulnerability affects IBM Algo One - Counterparty Credit Risk (CVE-2016-8745)
2018-06-15 22:49:25
f5
f5
K82455382 : Apache Tomcat vulnerability CVE-2016-8745
2017-09-28 00:00:00
SOL50116122 - Apache Tomcat vulnerability CVE-2016-6816
2016-12-01 00:00:00
K50116122 : Apache Tomcat vulnerability CVE-2016-6816
2016-12-01 00:00:00
ubuntucve
ubuntucve
CVE-2016-8745
2017-01-13 00:00:00
CVE-2016-6816
2016-11-23 00:00:00
CVE-2017-6056
2017-02-13 00:00:00
freebsd
freebsd
tomcat -- information disclosure vulnerability
2017-01-05 00:00:00
tomcat -- multiple vulnerabilities
2016-11-22 00:00:00
fedora
fedora
[SECURITY] Fedora 25 Update: tomcat-8.0.41-1.fc25
2017-02-22 17:29:28
[SECURITY] Fedora 24 Update: tomcat-8.0.41-1.fc24
2017-03-01 01:21:37
[SECURITY] Fedora 25 Update: tomcat-8.0.39-1.fc25
2016-12-14 21:31:31
github
github
Concurrent Execution using Shared Resource with Improper Synchronization in Apache Tomcat
2022-05-14 01:10:16
Improper Input Validation in Apache Tomcat
2022-05-13 01:14:53
veracode
veracode
Information Disclosure
2016-12-13 04:53:40
Cross-site Scripting (XSS) Or Information Disclosure
2019-01-15 09:15:22
Denial Of Service (DoS) Via Infinite Loop
2017-02-22 02:23:40
prion
prion
Code injection
2017-08-10 22:29:00
Design/Logic Flaw
2017-03-20 18:59:00
Design/Logic Flaw
2017-02-17 07:59:00
debiancve
debiancve
CVE-2016-8745
2017-08-10 22:29:00
CVE-2016-6816
2017-03-20 18:59:00
CVE-2017-6056
2017-02-17 07:59:00
exploitpack
exploitpack
Apache Tomcat 6789 - Information Disclosure
2017-04-04 00:00:00
packetstorm
packetstorm
Apache Tomcat 6 / 7 / 8 / 9 Information Disclosure
2017-04-04 00:00:00
seebug
seebug
Apache Tomcat information disclosure Vulnerability, CVE-2016-6816）
2017-02-13 00:00:00
zdt
zdt
Apache Tomcat 6/7/8/9 - Information Disclosure Vulnerability
2017-04-03 00:00:00
atlassian
atlassian
Upgrade Tomcat to the version 8.5.29
2017-03-14 13:20:53
Upgrade Tomcat to the version 8.5.29
2017-03-14 13:20:53
Update bundled Apache Tomcat due to security vulnerabilities
2017-04-17 08:48:35
exploitdb
exploitdb
Apache Tomcat 6/7/8/9 - Information Disclosure
2017-04-04 00:00:00
suse
suse
Security update for tomcat (important)
2017-05-15 21:24:34
Security update for tomcat (important)
2017-05-10 18:10:03
Security update for tomcat (important)
2017-05-23 21:11:53
archlinux
archlinux
[ASA-201611-22] tomcat6: multiple issues
2016-11-23 00:00:00
ubuntu
ubuntu
Tomcat regression
2017-02-02 00:00:00
Tomcat vulnerabilities
2017-01-23 00:00:00
Tomcat vulnerabilities
2020-09-30 00:00:00

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.009 Low

EPSS

Percentile

81.0%

JSON
Related for ELSA-2017-0527
nessus46redhat10openvas28amazon5centos2debian8oraclelinux1osv8redhatcve2mageia2tomcat10cve3ibm28f54ubuntucve3freebsd2fedora5github2veracode3prion3debiancve3exploitpack1packetstorm1seebug1zdt1atlassian4exploitdb1suse8archlinux1ubuntu3