[USN-6880-1] Tomcat vulnerability
Severity
High
Affected Packages
32
CVEs
1
Tomcat could allow unintended access to network services.
Sam Shahsavar discovered that Apache Tomcat did not properly reject
HTTP requests with an invalid Content-Length header. A remote attacker
could possibly use this issue to perform HTTP request smuggling attacks.
- ID
- USN-6880-1
- Severity
- high
- Severity from
- CVE-2022-42252
- URL
- https://ubuntu.com/security/notices/USN-6880-1
- Published
-
2024-07-09T01:11:28
(5 months ago) - Modified
-
2024-07-09T01:11:28
(5 months ago) - Other Advisories
DSA-5381-1
FREEBSD:556FDF03-6785-11ED-953B-002B67DFC673
GLSA-202305-37
MAVEN:GHSA-P22X-G9PX-3945
SUSE-SU-2022:4193-1
TOMCAT:CVE-2022-42252| Type | Package URL | Namespace | Name / Product | Version | Distribution / Platform | Arch | Patch / Fix |
|---|---|---|---|---|---|---|---|
| Affected | pkg:deb/ubuntu/tomcat9?distro=jammy | ubuntu |
 tomcat9
|
< 9.0.58-1ubuntu0.1+esm1 | jammy | ||
| Affected | pkg:deb/ubuntu/tomcat9?distro=focal | ubuntu |
tomcat9
|
< 9.0.31-1ubuntu0.5 | focal | ||
| Affected | pkg:deb/ubuntu/tomcat9?distro=bionic | ubuntu |
tomcat9
|
< 9.0.16-3ubuntu0.18.04.2+esm1 | bionic | ||
| Affected | pkg:deb/ubuntu/tomcat9-user?distro=jammy | ubuntu |
tomcat9-user
|
< 9.0.58-1ubuntu0.1+esm1 | jammy | ||
| Affected | pkg:deb/ubuntu/tomcat9-user?distro=focal | ubuntu |
tomcat9-user
|
< 9.0.31-1ubuntu0.5 | focal | ||
| Affected | pkg:deb/ubuntu/tomcat9-user?distro=bionic | ubuntu |
tomcat9-user
|
< 9.0.16-3ubuntu0.18.04.2+esm1 | bionic | ||
| Affected | pkg:deb/ubuntu/tomcat9-examples?distro=jammy | ubuntu |
tomcat9-examples
|
< 9.0.58-1ubuntu0.1+esm1 | jammy | ||
| Affected | pkg:deb/ubuntu/tomcat9-examples?distro=focal | ubuntu |
tomcat9-examples
|
< 9.0.31-1ubuntu0.5 | focal | ||
| Affected | pkg:deb/ubuntu/tomcat9-examples?distro=bionic | ubuntu |
tomcat9-examples
|
< 9.0.16-3ubuntu0.18.04.2+esm1 | bionic | ||
| Affected | pkg:deb/ubuntu/tomcat9-docs?distro=jammy | ubuntu |
tomcat9-docs
|
< 9.0.58-1ubuntu0.1+esm1 | jammy | ||
| Affected | pkg:deb/ubuntu/tomcat9-docs?distro=focal | ubuntu |
tomcat9-docs
|
< 9.0.31-1ubuntu0.5 | focal | ||
| Affected | pkg:deb/ubuntu/tomcat9-docs?distro=bionic | ubuntu |
tomcat9-docs
|
< 9.0.16-3ubuntu0.18.04.2+esm1 | bionic | ||
| Affected | pkg:deb/ubuntu/tomcat9-common?distro=jammy | ubuntu |
tomcat9-common
|
< 9.0.58-1ubuntu0.1+esm1 | jammy | ||
| Affected | pkg:deb/ubuntu/tomcat9-common?distro=focal | ubuntu |
tomcat9-common
|
< 9.0.31-1ubuntu0.5 | focal | ||
| Affected | pkg:deb/ubuntu/tomcat9-common?distro=bionic | ubuntu |
tomcat9-common
|
< 9.0.16-3ubuntu0.18.04.2+esm1 | bionic | ||
| Affected | pkg:deb/ubuntu/tomcat9-admin?distro=jammy | ubuntu |
tomcat9-admin
|
< 9.0.58-1ubuntu0.1+esm1 | jammy | ||
| Affected | pkg:deb/ubuntu/tomcat9-admin?distro=focal | ubuntu |
tomcat9-admin
|
< 9.0.31-1ubuntu0.5 | focal | ||
| Affected | pkg:deb/ubuntu/tomcat9-admin?distro=bionic | ubuntu |
tomcat9-admin
|
< 9.0.16-3ubuntu0.18.04.2+esm1 | bionic | ||
| Affected | pkg:deb/ubuntu/tomcat8?distro=bionic | ubuntu |
tomcat8
|
< 8.5.39-1ubuntu1~18.04.3+esm1 | bionic | ||
| Affected | pkg:deb/ubuntu/tomcat8-user?distro=bionic | ubuntu |
tomcat8-user
|
< 8.5.39-1ubuntu1~18.04.3+esm1 | bionic | ||
| Affected | pkg:deb/ubuntu/tomcat8-examples?distro=bionic | ubuntu |
tomcat8-examples
|
< 8.5.39-1ubuntu1~18.04.3+esm1 | bionic | ||
| Affected | pkg:deb/ubuntu/tomcat8-docs?distro=bionic | ubuntu |
tomcat8-docs
|
< 8.5.39-1ubuntu1~18.04.3+esm1 | bionic | ||
| Affected | pkg:deb/ubuntu/tomcat8-common?distro=bionic | ubuntu |
tomcat8-common
|
< 8.5.39-1ubuntu1~18.04.3+esm1 | bionic | ||
| Affected | pkg:deb/ubuntu/tomcat8-admin?distro=bionic | ubuntu |
tomcat8-admin
|
< 8.5.39-1ubuntu1~18.04.3+esm1 | bionic | ||
| Affected | pkg:deb/ubuntu/libtomcat9-java?distro=jammy | ubuntu |
libtomcat9-java
|
< 9.0.58-1ubuntu0.1+esm1 | jammy | ||
| Affected | pkg:deb/ubuntu/libtomcat9-java?distro=focal | ubuntu |
libtomcat9-java
|
< 9.0.31-1ubuntu0.5 | focal | ||
| Affected | pkg:deb/ubuntu/libtomcat9-java?distro=bionic | ubuntu |
libtomcat9-java
|
< 9.0.16-3ubuntu0.18.04.2+esm1 | bionic | ||
| Affected | pkg:deb/ubuntu/libtomcat9-embed-java?distro=jammy | ubuntu |
libtomcat9-embed-java
|
< 9.0.58-1ubuntu0.1+esm1 | jammy | ||
| Affected | pkg:deb/ubuntu/libtomcat9-embed-java?distro=focal | ubuntu |
libtomcat9-embed-java
|
< 9.0.31-1ubuntu0.5 | focal | ||
| Affected | pkg:deb/ubuntu/libtomcat9-embed-java?distro=bionic | ubuntu |
libtomcat9-embed-java
|
< 9.0.16-3ubuntu0.18.04.2+esm1 | bionic | ||
| Affected | pkg:deb/ubuntu/libtomcat8-java?distro=bionic | ubuntu |
libtomcat8-java
|
< 8.5.39-1ubuntu1~18.04.3+esm1 | bionic | ||
| Affected | pkg:deb/ubuntu/libtomcat8-embed-java?distro=bionic | ubuntu |
libtomcat8-embed-java
|
< 8.5.39-1ubuntu1~18.04.3+esm1 | bionic |
| # CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | Exploits | PoC | Pubblication Date | Modification Date |
|---|---|---|---|---|---|---|---|---|---|---|---|
| # CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | PoC | Pubblication Date | Modification Date |