Skip to content
OpenAdvisories
High USN-3027-1 1 CVE

tomcat8 vulnerability

Published Jul 6, 2016 · Updated Oct 8, 2026

Ecosystem: Ubuntu

Summary

It was discovered that the Tomcat Fileupload library incorrectly handled
certain upload requests. A remote attacker could possibly use this issue to
cause a denial of service.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 16.04 LTS 16.04:LTS tomcat8 8.0.32-1ubuntu1.1

Vulnerabilities 1

  • High 7.5
    CVE-2016-3092 EPSS 37%

    High severity vulnerability that affects commons-fileupload:commons-fileupload

    The MultipartStream class in Apache Commons Fileupload before 1.3.2, as used in Apache Tomcat 7.x before 7.0.70, 8.x before 8.0.36, 8.5.x before 8.5.3, and 9.x before 9.0.0.M7 and other products, allows remote attackers to cause a denial of service (CPU consu…

    tomcat8 tomcat7 tomcat6 commons-fileupload:commons-fileupload Debian Ubuntu Maven

References

  • report
    https://ubuntu.com/security/CVE-2016-3092