Lucene search

K
ubuntucveUbuntu.comUB:CVE-2018-1336
HistoryJul 24, 2018 - 12:00 a.m.

CVE-2018-1336

2018-07-2400:00:00
ubuntu.com
ubuntu.com
13

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.018 Low

EPSS

Percentile

88.0%

An improper handing of overflow in the UTF-8 decoder with supplementary
characters can lead to an infinite loop in the decoder causing a Denial of
Service. Versions Affected: Apache Tomcat 9.0.0.M9 to 9.0.7, 8.5.0 to
8.5.30, 8.0.0.RC1 to 8.0.51, and 7.0.28 to 7.0.86.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu14.04noarchtomcat7< 7.0.52-1ubuntu0.15UNKNOWN
ubuntu16.04noarchtomcat7< 7.0.68-1ubuntu0.4+esm1UNKNOWN
ubuntu16.04noarchtomcat8< 8.0.32-1ubuntu1.7UNKNOWN
ubuntu18.04noarchtomcat8< 8.5.39-1ubuntu1~18.04.1UNKNOWN

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.018 Low

EPSS

Percentile

88.0%