Apache Tomcat: Schwachstelle ermöglicht Denial of Service

Summary

Product

Vulnerabilities 1

• High 7.5
  CVE-2016-3092 EPSS 37%

  High severity vulnerability that affects commons-fileupload:commons-fileupload

  The MultipartStream class in Apache Commons Fileupload before 1.3.2, as used in Apache Tomcat 7.x before 7.0.70, 8.x before 8.0.36, 8.5.x before 8.5.3, and 9.x before 9.0.0.M7 and other products, allows remote attackers to cause a denial of service (CPU consu…

  tomcat8 tomcat7 tomcat6 commons-fileupload:commons-fileupload Debian Ubuntu Maven
  Jul 4, 2016

Revision history

1. 2023-03-16 #22

   Neue Updates von SUSE aufgenommen

2. 2023-03-14 #21

   Neue Updates von SUSE aufgenommen

3. 2021-07-18 #20

   Neue Updates von Gentoo aufgenommen

4. 2019-02-12 #19

   Neue Updates von NetApp aufgenommen

5. 2017-06-26 #18

   New remediations available

6. 2016-11-17 #16

   New remediations available

7. 2016-11-17 #17

   New remediations available

8. 2016-11-09 #14

   New remediations available

9. 2016-11-09 #15

   Version nicht vorhanden

10. 2016-11-06 #13

    New remediations available

11. 2016-11-03 #11

    New remediations available

12. 2016-11-03 #12

    Version nicht vorhanden

13. 2016-09-04 #9

    New remediations available

14. 2016-09-04 #10

    Version nicht vorhanden

15. 2016-07-06 #8

    New remediations available

16. 2016-07-05 #6

    New remediations available

17. 2016-07-05 #7

    Version nicht vorhanden

18. 2016-07-03 #5

    New remediations available

19. 2016-06-29 #3

    New remediations available

20. 2016-06-29 #4

    Version nicht vorhanden

21. 2016-06-22 #1

    Initial Release

22. 2016-06-22 #2

    Version nicht vorhanden

References

• SUSE Security Update SUSE-SU-2023:0758-1 vom 2023-03-16
  https://lists.suse.com/pipermail/sle-security-updates/2023-March/014070.html
• SUSE Security Update SUSE-SU-2023:0730-1 vom 2023-03-14
  https://lists.suse.com/pipermail/sle-security-updates/2023-March/014040.html
• Tomcat mailing list vom 2016-06-22
  http://mail-archives.apache.org/mod_mbox/tomcat-dev/201606.mbox/%3C6223ece6-2b41-ef4f-22f9-d3481e492832@apache.org%3E
• Debian Security Advisory DSA-3609 vom 2016-06-30
  http://www.debian.org/security/2016/dsa-3609
• Debian Security Advisory DSA-3614-1 vom 2016-07-02
  https://www.debian.org/security/2016/dsa-3614
• Ubuntu Security Notice USN-3024-1 vom 2016-07-05
  http://www.ubuntu.com/usn/usn-3024-1/
• Ubuntu Security Notice USN-3027-1 vom 2016-07-06
  http://www.ubuntu.com/usn/usn-3027-1/
• SUSE Security Update SUSE-SU-2016:2188-1 vom 2016-09-03
  https://www.suse.com/support/update/announcement/2016/suse-su-20162188-1.html
• Red Hat Security Advisory RHSA-2016:2599-1 vom 2016-11-03
  https://rhn.redhat.com/errata/RHSA-2016-2599.html
• HP Security Bulletin HPSBUX03665 vom 2016-11-07
  https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05324759
• Oracle Linux Security Advisory ELSA-2016-2599 vom 2016-11-09
  http://linux.oracle.com/errata/ELSA-2016-2599.html
• Red Hat Security Advisory RHSA-2016:2807 vom 2016-11-18
  https://access.redhat.com/errata/RHSA-2016:2807
• Red Hat Security Advisory RHSA-2016:2808 vom 2016-11-18
  https://rhn.redhat.com/errata/RHSA-2016-2808.html
• SUSE Security Update SUSE-SU-2017:1660-1 vom 2017-06-24
  https://www.suse.com/support/update/announcement/2017/suse-su-20171660-1.html
• NetApp Security Advisory NTAP-20190212-0001 vom 2019-02-12
  https://security.netapp.com/advisory/ntap-20190212-0001/
• Gentoo Linux Security Advisory GLSA-202107-39 vom 2021-07-17
  https://security.gentoo.org/glsa/202107-39