CVE-2018-1336
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 21%
probabilidade de exploração
21%top 3% das CVEs
exploração observada
nãonenhuma fonte reporta
An improper handing of overflow in the UTF-8 decoder with supplementary characters can lead to an infinite loop in the decoder causing a Denial of Service. Versions Affected: Apache Tomcat 9.0.0.M9 to 9.0.7, 8.5.0 to 8.5.30, 8.0.0.RC1 to 8.0.51, and 7.0.28 to 7.0.86.
Produtos afetados
Apache Software Foundation · Apache TomcatReferências
http://mail-archives.us.apache.org/mod_mbox/www-announce/201807.mbox/%3C20180722090435.GA60759%40minotaur.apache.org%3Ehttps://access.redhat.com/errata/RHEA-2018:2188https://access.redhat.com/errata/RHEA-2018:2189https://access.redhat.com/errata/RHSA-2018:2700https://access.redhat.com/errata/RHSA-2018:2701https://access.redhat.com/errata/RHSA-2018:2740https://access.redhat.com/errata/RHSA-2018:2741https://access.redhat.com/errata/RHSA-2018:2742https://access.redhat.com/errata/RHSA-2018:2743https://access.redhat.com/errata/RHSA-2018:2921https://access.redhat.com/errata/RHSA-2018:2930https://access.redhat.com/errata/RHSA-2018:2939