7.5

CVE-2017-6056

It was discovered that a programming error in the processing of HTTPS requests in the Apache Tomcat servlet and JSP engine may result in denial of service via an infinite loop. The denial of service is easily achievable as a consequence of backporting a CVE-2016-6816 fix but not backporting the fix for Tomcat bug 57544. Distributions affected by this backporting issue include Debian (before 7.0.56-3+deb8u8 and 8.0.14-1+deb8u7 in jessie) and Ubuntu.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Canonical ≫ Ubuntu Linux Version12.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version14.04 SwEditionlts
Debian ≫ Debian Linux Version8.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 7.49% 0.937
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
https://lists.apache.org/thread.html/6b414817c2b0bf351138911c8c922ec5dd577ebc0b9a7f42d705752d%40%3Cissues.activemq.apache.org%3E
http://rhn.redhat.com/errata/RHSA-2017-0517.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2017-0826.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2017-0827.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2017-0828.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2017-0829.html
Third Party Advisory
https://security.netapp.com/advisory/ntap-20180731-0002/
Third Party Advisory
http://www.debian.org/security/2017/dsa-3787
Third Party Advisory
http://www.debian.org/security/2017/dsa-3788
Third Party Advisory
http://www.securityfocus.com/bid/96293
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1037860
Third Party Advisory
VDB Entry
https://bugs.debian.org/851304
Third Party Advisory
Issue Tracking
https://bz.apache.org/bugzilla/show_bug.cgi?id=60578
Third Party Advisory
Issue Tracking
https://lists.apache.org/thread.html/ac51944aef91dd5006b8510b0bef337adaccfe962fb90e7af9c22db4%40%3Cissues.activemq.apache.org%3E
https://lists.debian.org/debian-security-announce/2017/msg00038.html
Third Party Advisory
https://lists.debian.org/debian-security-announce/2017/msg00039.html
Third Party Advisory