Linux Distros Unpatched Vulnerability : CVE-2016-6816

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The code in Apache Tomcat 9.0.0.M1 to 9.0.0.M11, 8.5.0 to 8.5.6, 8.0.0.RC1 to 8.0.38, 7.0.0 to 7.0.72, and 6.0.0 to 6.0.47 that parsed the HTTP request line...

Apache Tomcat 7.0.0 < 7.0.73 multiple vulnerabilities

The version of Tomcat installed on the remote host is prior to 7.0.73. It is, therefore, affected by multiple vulnerabilities as referenced in the fixedinapachetomcat7.0.73security-7 advisory. - Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before...

Apache Tomcat 8.0.0.RC1 < 8.0.39 multiple vulnerabilities

The version of Tomcat installed on the remote host is prior to 8.0.39. It is, therefore, affected by multiple vulnerabilities as referenced in the fixedinapachetomcat8.0.39security-8 advisory. - Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before...

Security Bulletin: Multiple vulnerabilities in Apache Tomcat affect SAN Volume Controller, Storwize family and FlashSystem V9000 products

Summary Vulnerabilities in the Apache Tomcat component affect the management GUI of SAN Volume Controller, Storwize family and FlashSystem V9000 products. The CLI interface is unaffected. The CVEs are CVE-2016-6796 CVE-2016-6816 CVE-2016-6817. Vulnerability Details CVEID: CVE-2016-6796 DESCRIPTIO...

K50116122: Apache Tomcat vulnerability CVE-2016-6816

Security Advisory Description The code in Apache Tomcat 9.0.0.M1 to 9.0.0.M11, 8.5.0 to 8.5.6, 8.0.0.RC1 to 8.0.38, 7.0.0 to 7.0.72, and 6.0.0 to 6.0.47 that parsed the HTTP request line permitted invalid characters. This could be exploited, in conjunction with a proxy that also permitted the...

Security Bulletin: Vulnerabilities in Apache Tomcat affect the IBM FlashSystem models 840 and 900

Summary There are vulnerabilities in Apache Tomcat to which the IBM® FlashSystem™ 840 and FlashSystem™ 900 are susceptible. An exploit of these vulnerabilities CVE-2016-6816, CVE-2016-6817, and CVE-2016-6796 could allow a remote attacker to obtain sensitive information, cause an application to...

com.att.nsa:msgrtr (0.0.5), com.att.nsa:nsaserverlibrary (1.0.10) +84 more potentially affected by CVE-2016-6816 via org.apache.tomcat:tomcat-coyote (>=8.0.0-rc1, <=8.0.38)

org.apache.tomcat:tomcat-coyote MAVEN version =8.0.0-rc1, =0.9.1-beta3, =0.9.1-beta3, =1.7, =2.1, =1.2, =16, =16, =1.0.0, =1.1.0 - com.totalchange.servlicle:tomcat8 1.0.0 and more Source cves: CVE-2016-6816 Source advisory: OSV:GHSA-JC7P-5R39-9477...

com.carecon.fabric3:fabric3-tomcat7-extension (>=3.0.0, <=3.1.0), com.cloudbees:cloudbees-web-container-extras (>=1.0.0, <=1.0.7) +123 more potentially affected by CVE-2016-6816 via org.apache.tomcat:tomcat-coyote (>=7.0.0, <=7.0.72)

org.apache.tomcat:tomcat-coyote MAVEN version =7.0.0, =3.0.0, =1.0.0, =1.3, =1.5, =1.0.0, =1.0.0, =2.1, =1.8.0, =1.7.0, =1.9.0-rc1, =2.0.0 - de.metalcon.utils:form-item-list 1.0.0 - de.skiptag.roadrunner:roadrunner-servlet 0.1 - de.skiptag.roadrunner:roadrunner-spring 0.1 -...

com.carecon.fabric3:fabric3-tomcat7-extension (>=3.0.0, <=3.1.0), com.cloudbees:cloudbees-web-container-extras (>=1.0.0, <=1.0.7) +123 more potentially affected by CVE-2016-6816 via org.apache.tomcat:tomcat-coyote (>=7.0.0, <=7.0.72)

org.apache.tomcat:tomcat-coyote MAVEN version =7.0.0, =3.0.0, =1.0.0, =1.3, =1.5, =1.0.0, =1.0.0, =2.1, =1.8.0, =1.7.0, =1.9.0-rc1, =2.0.0 - de.metalcon.utils:form-item-list 1.0.0 - de.skiptag.roadrunner:roadrunner-servlet 0.1 - de.skiptag.roadrunner:roadrunner-spring 0.1 -...

com.collaborne.operations:tomcat-remoteip-aws-valve (>=1.0.0, <=1.1.5), com.gantzgulch.tools:gantzgulch-tools-http (>=1.0.4, <=1.0.27) +40 more potentially affected by CVE-2016-6816 via org.apache.tomcat:tomcat-coyote (>=8.5.0, <=8.5.6)

org.apache.tomcat:tomcat-coyote MAVEN version =8.5.0, =1.0.0, =1.0.4, =1.9.5, =1.0.0-incubating, =8.5.0, =8.5.0, =8.5.0, =8.5.0, =8.5.0, =7.0.0, =7.0.0, =7.0.2 and more Source cves: CVE-2016-6816 Source advisory: GHSA-JC7P-5R39-9477...

Mageia: Security Advisory (MGASA-2016-0417)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: Vulnerabilities in Apache Tomcat affect Power Hardware Management Console (CVE-2016-6816, CVE-2016-6817, and CVE-2016-0762)

Summary Apache Tomcat is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-6816 DESCRIPTION: Apache Tomcat is vulnerable to HTTP response splitting attacks, caused by improper validation of user-supplied input. A remote...

SUSE: Security Advisory (SUSE-SU-2017:1660-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-4557-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-4557-1: Tomcat vulnerabilities

It was discovered that the Tomcat realm implementations incorrectly handled passwords when a username didn't exist. A remote attacker could possibly use this issue to enumerate usernames. CVE-2016-0762 Alvaro Munoz and Alexander Mirosh discovered that Tomcat incorrectly limited use of a certain...

Security Bulletin: WebSphere Message Broker and IBM Integration Bus are affected by Open Source Tomcat vulnerability

Summary WebSphere Message Broker and IBM Integration Bus are affected by Open Source Apache Tomcat vulnerability Vulnerability Details CVEID: CVE-2016-6816 DESCRIPTION: Apache Tomcat is vulnerable to HTTP response splitting attacks, caused by improper validation of user-supplied input. A remote...

Security Bulletin: IBM WebSphere Cast Iron Solution is affected by Apache Tomcat vulnerabilities (CVE-2016-8735, CVE-2016-6816)

Summary There are vulnerabilities CVE-2016-8735, CVE-2016-6816 reported in Apache Tomcat v6 that is used by WebSphere Cast Iron Solution. WebSphere Cast Iron has remediated the affected versions. Vulnerability Details CVEID: CVE-2016-8735 DESCRIPTION: Apache Tomcat could allow a remote attacker t...

Security Bulletin: Open Source Apache Tomcat Vulnerabilities (CVE-2016-6817, CVE-2016-8735, CVE-2016-6816)

Summary Issues with Apache Tomcat Vulnerabilities have been addressed. Vulnerability Details CVEID: CVE-2016-6817 DESCRIPTION: Apache Tomcat is vulnerable to a denial of service. By sending a specially crafted HTTP/2 header, a remote attacker could exploit this vulnerability to cause the...

RHEL 7 : Red Hat JBoss Enterprise Application Platform (RHSA-2017:0245)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:0245 advisory. Red Hat JBoss Enterprise Application Platform 6 is a platform for Java applications based on JBoss Application Server 7. This release of Red...

Security Bulletin: Vulnerabilities in Apache Tomcat affect the IBM FlashSystem model V840

Summary There are vulnerabilities in Apache Tomcat to which the IBM® FlashSystem™ V840 is susceptible. An exploit of these vulnerabilities CVE-2016-6816, CVE-2016-6817, and CVE-2016-6796 could allow a remote attacker to obtain sensitive information, cause an application to enter an infinite loop,...