UBUNTU-CVE-2016-8745

See a problem?
Source
https://ubuntu.com/security/notices/UBUNTU-CVE-2016-8745
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2016/UBUNTU-CVE-2016-8745.json
JSON Data
https://api.osv.dev/v1/vulns/UBUNTU-CVE-2016-8745
Related
Published
2017-01-13T00:00:00Z
Modified
2017-01-13T00:00:00Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

A bug in the error handling of the send file code for the NIO HTTP connector in Apache Tomcat 9.0.0.M1 to 9.0.0.M13, 8.5.0 to 8.5.8, 8.0.0.RC1 to 8.0.39, 7.0.0 to 7.0.73 and 6.0.16 to 6.0.48 resulted in the current Processor object being added to the Processor cache multiple times. This in turn meant that the same Processor could be used for concurrent requests. Sharing a Processor can result in information leakage between requests including, not not limited to, session ID and the response body. The bug was first noticed in 8.5.x onwards where it appears the refactoring of the Connector code for 8.5.x onwards made it more likely that the bug was observed. Initially it was thought that the 8.5.x refactoring introduced the bug but further investigation has shown that the bug is present in all currently supported Tomcat versions.

References

Affected packages

Ubuntu:14.04:LTS / tomcat7

Package

Name
tomcat7
Purl
pkg:deb/ubuntu/tomcat7@7.0.52-1ubuntu0.8?arch=src?distro=trusty

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
7.0.52-1ubuntu0.8

Affected versions

7.*

7.0.42-1
7.0.47-1
7.0.50-1
7.0.52-1
7.0.52-1ubuntu0.1
7.0.52-1ubuntu0.3
7.0.52-1ubuntu0.6
7.0.52-1ubuntu0.7

Ecosystem specific 

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "tomcat7-examples": "7.0.52-1ubuntu0.8",
            "tomcat7-admin": "7.0.52-1ubuntu0.8",
            "tomcat7-user": "7.0.52-1ubuntu0.8",
            "libservlet3.0-java": "7.0.52-1ubuntu0.8",
            "libservlet3.0-java-doc": "7.0.52-1ubuntu0.8",
            "libtomcat7-java": "7.0.52-1ubuntu0.8",
            "tomcat7-docs": "7.0.52-1ubuntu0.8",
            "tomcat7": "7.0.52-1ubuntu0.8",
            "tomcat7-common": "7.0.52-1ubuntu0.8"
        }
    ]
}

Ubuntu:Pro:14.04:LTS / tomcat6

Package

Name
tomcat6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.0.37-1
6.0.39-1
6.0.39-1ubuntu0.1
6.0.39-1ubuntu0.1+esm1

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

Ubuntu:16.04:LTS / tomcat7

Package

Name
tomcat7
Purl
pkg:deb/ubuntu/tomcat7@7.0.68-1ubuntu0.3?arch=src?distro=xenial

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
7.0.68-1ubuntu0.3

Affected versions

7.*

7.0.64-1
7.0.68-1
7.0.68-1ubuntu0.1

Ecosystem specific 

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "tomcat7-examples": "7.0.68-1ubuntu0.3",
            "tomcat7-admin": "7.0.68-1ubuntu0.3",
            "tomcat7-user": "7.0.68-1ubuntu0.3",
            "libservlet3.0-java": "7.0.68-1ubuntu0.3",
            "libservlet3.0-java-doc": "7.0.68-1ubuntu0.3",
            "libtomcat7-java": "7.0.68-1ubuntu0.3",
            "tomcat7-docs": "7.0.68-1ubuntu0.3",
            "tomcat7": "7.0.68-1ubuntu0.3",
            "tomcat7-common": "7.0.68-1ubuntu0.3"
        }
    ]
}

Ubuntu:16.04:LTS / tomcat8

Package

Name
tomcat8
Purl
pkg:deb/ubuntu/tomcat8@8.0.32-1ubuntu1.3?arch=src?distro=xenial

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.0.32-1ubuntu1.3

Affected versions

8.*

8.0.26-1
8.0.28-1
8.0.30-1
8.0.32-1
8.0.32-1ubuntu1
8.0.32-1ubuntu1.1
8.0.32-1ubuntu1.2

Ecosystem specific 

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "tomcat8-common": "8.0.32-1ubuntu1.3",
            "tomcat8-admin": "8.0.32-1ubuntu1.3",
            "tomcat8-user": "8.0.32-1ubuntu1.3",
            "libtomcat8-java": "8.0.32-1ubuntu1.3",
            "tomcat8": "8.0.32-1ubuntu1.3",
            "tomcat8-examples": "8.0.32-1ubuntu1.3",
            "libservlet3.1-java-doc": "8.0.32-1ubuntu1.3",
            "libservlet3.1-java": "8.0.32-1ubuntu1.3",
            "tomcat8-docs": "8.0.32-1ubuntu1.3"
        }
    ]
}

Ubuntu:Pro:16.04:LTS / tomcat6

Package

Name
tomcat6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.0.41-4
6.0.45+dfsg-1
6.0.45+dfsg-1ubuntu0.1
6.0.45+dfsg-1ubuntu0.2

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}