Medium WID-SEC-2026-2610 3 CVEs

Apache Tomcat: Mehrere Schwachstellen

Published Jul 22, 2018 · Updated Aug 2, 2026 · Revision 32 · de-DE

Vendor: Apache Vendor: Avaya Vendor: Debian Vendor: F5 Vendor: HPE Vendor: Juniper Networks Vendor: Oracle Vendor: Red Hat Vendor: SUSE Vendor: Ubuntu Product: Aura Application Enablement Services Product: Aura Experience Portal Product: BIG-IP Product: CMS Product: Enterprise Linux Product: HP-UX Product: Junos Space Product: Linux Product: Linux Product: Linux Product: Linux Product: Session Border Controller Product: Tomcat Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apache Tomcat ausnutzen, um einen Denial of Service Angriff durchzuführen, oder Sicherheitsvorkehrungen zu umgehen.

Product

Apache Tomcat ist ein Web-Applikationsserver für verschiedene Plattformen.

Vulnerabilities 3

High 7.5

CVE-2018-1336 EPSS 20%

In Apache Tomcat there is an improper handing of overflow in the UTF-8 decoder

An improper handing of overflow in the UTF-8 decoder with supplementary characters can lead to an infinite loop in the decoder causing a Denial of Service. Versions Affected: Apache Tomcat 9.0.0.M9 to 9.0.7, 8.5.0 to 8.5.30, 8.0.0.RC1 to 8.0.51, and 7.0.28 to…

Apache Software Foundation Apache Tomcat tomcat8 tomcat7 Ubuntu Maven

Aug 2, 2018
High 7.5

CVE-2018-8034 EPSS 21%

The host name verification missing in Apache Tomcat

The host name verification when using TLS with the WebSocket client was missing. It is now enabled by default. Versions Affected: Apache Tomcat 9.0.0.M1 to 9.0.9, 8.5.0 to 8.5.31, 8.0.0.RC1 to 8.0.52, and 7.0.35 to 7.0.88.

Apache Software Foundation Apache Tomcat tomcat8 tomcat7 Ubuntu Maven

Aug 1, 2018
Medium 5.9

CVE-2018-8037 EPSS 11%

Apache Tomcat Race Condition vulnerability

If an async request was completed by the application at the same time as the container triggered the async timeout, a race condition existed that could result in a user seeing a response intended for a different user. An additional issue was present in the NI…

Apache Software Foundation Apache Tomcat tomcat8 org.apache.tomcat.embed:tomcat-embed-core Ubuntu Maven

Aug 2, 2018

Revision history

2026-08-02 #32
Neue Updates von Oracle Linux aufgenommen
2020-09-22 #31
Neue Updates von HP aufgenommen
2020-01-12 #30
Neue Updates von Juniper aufgenommen
2020-01-08 #29
Neue Updates von AVAYA aufgenommen
2019-11-14 #28
Neue Updates von Red Hat aufgenommen
2019-08-06 #27
Neue Updates von Red Hat aufgenommen
2019-06-18 #26
Neue Updates von Red Hat aufgenommen
2019-05-13 #25
Neue Updates von Red Hat aufgenommen
2019-03-04 #24
Neue Updates von Red Hat aufgenommen
2019-01-22 #23
Neue Updates von Red Hat aufgenommen
2018-11-28 #22
New remediations available
2018-10-24 #21
New remediations available
2018-10-21 #20
New remediations available
2018-10-18 #19
New remediations available
2018-10-17 #18
New remediations available
2018-10-16 #16
New remediations available
2018-10-16 #17
New remediations available
2018-10-15 #15
New remediations available
2018-10-04 #14
New remediations available
2018-10-03 #12
New remediations available
2018-10-03 #13
New remediations available
2018-09-24 #11
New remediations available
2018-09-13 #10
New remediations available
2018-09-12 #9
New remediations available
2018-09-06 #7
New remediations available

References

Apache Tomcat Security Site vom 2018-07-22
http://tomcat.apache.org/security-9.html
Ubuntu Security Advisory USN-3723-1 vom 2018-07-25
https://usn.ubuntu.com/3723-1/
Debian Security Advisory DSA-4281 vom 2018-08-29
https://www.debian.org/security/2018/dsa-4281
F5 Security Advisory K73008537 vom 2018-09-07
https://support.f5.com/csp/article/K73008537
Red Hat Security Advisory RHSA-2018:2700 vom 2018-09-13
https://access.redhat.com/errata/RHSA-2018:2700
SUSE Security Update SUSE-SU-2018:2699-1 vom 2018-09-13
https://www.suse.com/support/update/announcement/2018/suse-su-20182699-1.html
Red Hat Security Advisory RHSA-2018:2743 vom 2018-09-25
http://rhn.redhat.com/errata/RHSA-2018-2743.html
Red Hat Security Advisory RHSA-2018:2742 vom 2018-09-25
http://rhn.redhat.com/errata/RHSA-2018-2742.html
Red Hat Security Advisory RHSA-2018:2868 vom 2018-10-03
https://access.redhat.com/errata/RHSA-2018:2868
Red Hat Security Advisory RHSA-2018:2867 vom 2018-10-03
https://access.redhat.com/errata/RHSA-2018:2867
SUSE Security Update SUSE-SU-2018:3011-1 vom 2018-10-05
https://www.suse.com/support/update/announcement/2018/suse-su-20183011-1.html
Red Hat Security Advisory RHSA-2018:2921 vom 2018-10-16
http://rhn.redhat.com/errata/RHSA-2018-2921.html
Oracle Linux Security Advisory ELSA-2018-2921 vom 2018-10-16
http://linux.oracle.com/errata/ELSA-2018-2921.html
Red Hat Security Advisory RHSA-2018:2930 vom 2018-10-17
https://access.redhat.com/errata/RHSA-2018:2930
Red Hat Security Advisory RHSA-2018:2939 vom 2018-10-17
https://access.redhat.com/errata/RHSA-2018:2939
CentOS-announce CESA-2018:2921 vom 2018-10-16
https://lists.centos.org/pipermail/centos-announce/2018-October/023067.html
SUSE Security Update SUSE-SU-2018:3261-1 vom 2018-10-21
https://www.suse.com/support/update/announcement/2018/suse-su-20183261-1.html
SUSE Security Update SUSE-SU-2018:3388-1 vom 2018-10-25
https://www.suse.com/support/update/announcement/2018/suse-su-20183388-1.html
SUSE Security Update SUSE-SU-2018:3011-2 vom 2018-11-29
https://www.suse.com/support/update/announcement/2018/suse-su-20183011-2.html
Red Hat Security Advisory RHSA-2019:0131 vom 2019-01-22
https://access.redhat.com/errata/RHSA-2019:0131
Red Hat Security Advisory RHSA-2019:0130 vom 2019-01-22
https://access.redhat.com/errata/RHSA-2019:0130
Red Hat Security Advisory RHSA-2019:0450 vom 2019-03-04
https://access.redhat.com/errata/RHSA-2019:0450
Red Hat Security Advisory RHSA-2019:0451 vom 2019-03-04
https://access.redhat.com/errata/RHSA-2019:0451
Red Hat Security Advisory RHSA-2019:1162 vom 2019-05-13
https://access.redhat.com/errata/RHSA-2019:1162
Red Hat Security Advisory RHSA-2019:1159 vom 2019-05-13
https://access.redhat.com/errata/RHSA-2019:1159
Red Hat Security Advisory RHSA-2019:1161 vom 2019-05-13
https://access.redhat.com/errata/RHSA-2019:1161
Red Hat Security Advisory RHSA-2019:1160 vom 2019-05-13
https://access.redhat.com/errata/RHSA-2019:1160
Red Hat Security Advisory RHSA-2019:1529 vom 2019-06-19
https://access.redhat.com/errata/RHSA-2019:1529
Red Hat Security Advisory RHSA-2019:2205 vom 2019-08-06
https://access.redhat.com/errata/RHSA-2019:2205
Red Hat Security Advisory RHSA-2019:3892 vom 2019-11-14
https://access.redhat.com/errata/RHSA-2019:3892
AVAYA Security Advisory ASA-2018-242 vom 2020-01-07
https://downloads.avaya.com/css/P8/documents/101051912
Juniper Security Bulletin
https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10993
Hewlett Packard Enterprise Support Center
https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbux04015en_us
Oracle Linux Security Advisory ELSA-2026-43218 vom 2026-08-01
https://linux.oracle.com/errata/ELSA-2026-43218.html