Skip to content
OpenAdvisories
Critical USN-3519-1 4 CVEs

tomcat7, tomcat8 vulnerabilities

Published Jan 8, 2018 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Tomcat incorrectly handled certain pipelined
requests when sendfile was used. A remote attacker could use this issue to
obtain wrong responses possibly containing sensitive information.
(CVE-2017-5647)

It was discovered that Tomcat incorrectly used the appropriate facade
object. A malicious application could possibly use this to bypass Security
Manager restrictions. (CVE-2017-5648)

It was discovered that Tomcat incorrectly handled error pages. A remote
attacker could possibly use this issue to replace or remove the custom
error page. (CVE-2017-5664)

It was discovered that Tomcat incorrectly handled the CORS filter. A remote
attacker could possibly use this issue to perform cache poisoning.
(CVE-2017-7674)

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS tomcat7 7.0.52-1ubuntu0.13
Ubuntu · 16.04 LTS 16.04:LTS tomcat8 8.0.32-1ubuntu1.5

Vulnerabilities 4

  • Critical 9.1
    CVE-2017-5648 EPSS 13%

    Exposure of Resource to Wrong Sphere in Apache Tomcat

    While investigating bug 60718, it was noticed that some calls to application listeners in Apache Tomcat 9.0.0.M1 to 9.0.0.M17, 8.5.0 to 8.5.11, 8.0.0.RC1 to 8.0.41, and 7.0.0 to 7.0.75 did not use the appropriate facade object. When running an untrusted appli…

    Apache Software Foundation Apache Tomcat tomcat8 tomcat7 Ubuntu Maven
  • High 7.5
    CVE-2017-5647 EPSS 17%

    Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat

    A bug in the handling of the pipelined requests in Apache Tomcat 9.0.0.M1 to 9.0.0.M18, 8.5.0 to 8.5.12, 8.0.0.RC1 to 8.0.42, 7.0.0 to 7.0.76, and 6.0.0 to 6.0.52, when send file was used, results in the pipelined request being lost when send file processing …

    Apache Software Foundation Apache Tomcat org.apache.tomcat:tomcat tomcat8 Ubuntu Maven
  • High 7.5
    CVE-2017-5664 EPSS 17%

    Improper Handling of Exceptional Conditions in Apache Tomcat

    The error page mechanism of the Java Servlet Specification requires that, when an error occurs and an error page is configured for the error that occurred, the original request and response are forwarded to the error page. This means that the request is prese…

    Apache Software Foundation Apache Tomcat org.apache.tomcat:tomcat tomcat8 Ubuntu Maven
  • Medium 4.3
    CVE-2017-7674

    Insufficient Verification of Data Authenticity in Apache Tomcat

    The CORS Filter in Apache Tomcat 9.0.0.M1 to 9.0.0.M21, 8.5.0 to 8.5.15, 8.0.0.RC1 to 8.0.44 and 7.0.41 to 7.0.78 did not add an HTTP Vary header indicating that the response varies depending on Origin. This permitted client and server side cache poisoning in…

    Apache Software Foundation Apache Tomcat org.apache.tomcat:tomcat tomcat8 Ubuntu Maven

References

  • report
    https://ubuntu.com/security/CVE-2017-5647
  • report
    https://ubuntu.com/security/CVE-2017-5648
  • report
    https://ubuntu.com/security/CVE-2017-5664
  • report
    https://ubuntu.com/security/CVE-2017-7674