Skip to content
OpenAdvisories
Medium Public exploit CVE-2010-4476 EUVD-2022-4017GHSA-gvgc-rxmh-5hvw

Apache Tomcat affected by infinite loop in Double.parseDouble method in Java Runtime Environment

Published Feb 17, 2011 · Updated Aug 7, 2024 · Assigned by oracle

Package: org.apache.tomcat:tomcat Ecosystem: Maven

Description

The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a crafted string that triggers an infinite loop of estimations during conversion to a double-precision binary floating-point number, as demonstrated using 2.2250738585072012e-308.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 6.0 openjdk-6 6b18-1.8.3-2+squeeze1 DSA-2161-1
Debian 5.0 openjdk-6 6b18-1.8.3-2~lenny1 DSA-2161-2

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 6 java-1.5.0-ibm +6 1:1.5.0.12.3-1jpp.3.el6 RHSA-2011:0291
RHEL 6 java-1.6.0-ibm +6 1:1.6.0.9.0-1jpp.5.el6 RHSA-2011:0290
RHEL 6 java-1.6.0-openjdk +4 1:1.6.0.0-1.36.b17.el6_0 RHSA-2011:0214
RHEL 6 java-1.6.0-sun +5 1:1.6.0.24-1jpp.1.el6 RHSA-2011:0282
RHEL 6 tomcat6 +9 6.0.24-24.el6_0 RHSA-2011:0335
RHEL 5 java-1.4.2-ibm +6 1.4.2.13.8-1jpp.3.el5 RHSA-2011:0292
RHEL 5 java-1.4.2-ibm-sap +4 1.4.2.13.8.sap-1jpp.2.el5 RHSA-2011:0299
RHEL 5 java-1.5.0-ibm +7 1:1.5.0.12.3-1jpp.2.el5 RHSA-2011:0291
RHEL 5 java-1.6.0-ibm +7 1:1.6.0.9.0-1jpp.4.el5 RHSA-2011:0290
RHEL 5 java-1.6.0-openjdk +4 1:1.6.0.0-1.18.b17.el5 RHSA-2011:0214
RHEL 5 java-1.6.0-sun +5 1:1.6.0.24-1jpp.1.el5 RHSA-2011:0282
RHEL 5 tomcat5 +10 5.5.23-0jpp.17.el5_6 RHSA-2011:0336
RHEL 4 java-1.4.2-ibm +6 1.4.2.13.8-1jpp.4.el4 RHSA-2011:0292
RHEL 4 java-1.4.2-ibm-sap +4 1.4.2.13.8.sap-1jpp.2.el4_8 RHSA-2011:0299
RHEL 4 java-1.5.0-ibm +6 1:1.5.0.12.3-1jpp.2.el4 RHSA-2011:0291
RHEL 4 java-1.6.0-ibm +6 1:1.6.0.9.0-1jpp.4.el4 RHSA-2011:0290
RHEL 4 java-1.6.0-sun +5 1:1.6.0.24-1jpp.1.el4 RHSA-2011:0282
Show 5 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat Network Satellite 5 java-1.6.0-ibm +1 1:1.6.0.9.1-1jpp.1.el5 RHSA-2011:0880
Red Hat JBoss Web Server 1 tomcat5 +12 5.5.28-12_patch_03.ep5.el5 RHSA-2011:0349
Red Hat JBoss Web Server 1 tomcat6 +9 6.0.24-11.patch_03.ep5.el4 RHSA-2011:0348
Red Hat JBoss Web Platform 5 jbossweb +3 2.1.10-5.patch01.1.1.ep5.el5 RHSA-2011:0211
Red Hat JBoss EAP 5 jbossweb +3 2.1.10-5.patch01.1.ep5.el4 RHSA-2011:0210
Red Hat JBoss EAP 4 jbossweb 2.0.0-8.CP15.patch01.0jpp.ep1.1.el4 RHSA-2011:0210

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

Exploit-DB 1

GitHub 1 repository

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.apache.tomcat:tomcat >= 7.0.0, < 7.0.7 7.0.7 GHSA-gvgc-rxmh-5hvw
Maven org.apache.tomcat:tomcat >= 6.0.0, < 6.0.32 6.0.32 GHSA-gvgc-rxmh-5hvw
Maven org.apache.tomcat:tomcat >= 5.5.0, < 5.5.33 5.5.33 GHSA-gvgc-rxmh-5hvw

Advisories 15

References