Skip to content
OpenAdvisories
High 2 exploited CVEs ELSA-2017-3081 4 CVEs

Important: tomcat security update (Oracle Linux 7)

Published Oct 30, 2017 · Updated Oct 30, 2017

Ecosystem: Oracle Linux

Summary

[0:7.0.76-3]
- Resolves: rhbz#1498344 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
- Resolves: rhbz#1495654 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
- Resolves: rhbz#1470596 CVE-2017-5647 Add follow up revision

Fixed packages 10

ReleasePackageFixed in
Oracle Linux · 7 tomcat 0:7.0.76-3.el7_4
Oracle Linux · 7 tomcat-admin-webapps 0:7.0.76-3.el7_4
Oracle Linux · 7 tomcat-docs-webapp 0:7.0.76-3.el7_4
Oracle Linux · 7 tomcat-el-2.2-api 0:7.0.76-3.el7_4
Oracle Linux · 7 tomcat-javadoc 0:7.0.76-3.el7_4
Oracle Linux · 7 tomcat-jsp-2.2-api 0:7.0.76-3.el7_4
Oracle Linux · 7 tomcat-jsvc 0:7.0.76-3.el7_4
Oracle Linux · 7 tomcat-lib 0:7.0.76-3.el7_4
Oracle Linux · 7 tomcat-servlet-3.0-api 0:7.0.76-3.el7_4
Oracle Linux · 7 tomcat-webapps 0:7.0.76-3.el7_4

Vulnerabilities 4

  • High 8.1
    CVE-2017-12615 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    When running Apache Tomcat on Windows with HTTP PUTs enabled it was possible to upload a JSP file to the server

    When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could th…

    Apache Software Foundation Apache Tomcat org.apache.tomcat.embed:tomcat-embed-core Maven
    KEV Mar 25, 2022
  • High 8.1
    CVE-2017-12617 Exploited Public exploit Scanner template EPSS 100%

    Unrestricted Upload of File with Dangerous Type Apache Tomcat

    When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload a JSP fil…

    Apache Software Foundation Apache Tomcat tomcat8 tomcat7 Ubuntu Maven
    KEV Mar 25, 2022
  • High 7.5
    CVE-2017-5647 EPSS 17%

    Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat

    A bug in the handling of the pipelined requests in Apache Tomcat 9.0.0.M1 to 9.0.0.M18, 8.5.0 to 8.5.12, 8.0.0.RC1 to 8.0.42, 7.0.0 to 7.0.76, and 6.0.0 to 6.0.52, when send file was used, results in the pipelined request being lost when send file processing …

    Apache Software Foundation Apache Tomcat org.apache.tomcat:tomcat tomcat8 Ubuntu Maven
  • Medium 4.3
    CVE-2017-7674

    Insufficient Verification of Data Authenticity in Apache Tomcat

    The CORS Filter in Apache Tomcat 9.0.0.M1 to 9.0.0.M21, 8.5.0 to 8.5.15, 8.0.0.RC1 to 8.0.44 and 7.0.41 to 7.0.78 did not add an HTTP Vary header indicating that the response varies depending on Origin. This permitted client and server side cache poisoning in…

    Apache Software Foundation Apache Tomcat org.apache.tomcat:tomcat tomcat8 Ubuntu Maven