← back
CVE-2018-1336

CVE-2018-1336

EPSS 20.6%
An improper handing of overflow in the UTF-8 decoder with supplementary characters can lead to an infinite loop in the decoder causing a Denial of Service. Versions Affected: Apache Tomcat 9.0.0.M9 to 9.0.7, 8.5.0 to 8.5.30, 8.0.0.RC1 to 8.0.51, and 7.0.28 to 7.0.86.
Affected products
Apache Software Foundation · Apache Tomcat

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://mail-archives.us.apache.org/mod_mbox/www-announce/201807.mbox/%3C20180722090435.GA60759%40minotaur.apache.org%3Ehttps://access.redhat.com/errata/RHEA-2018:2188https://access.redhat.com/errata/RHEA-2018:2189https://access.redhat.com/errata/RHSA-2018:2700https://access.redhat.com/errata/RHSA-2018:2701https://access.redhat.com/errata/RHSA-2018:2740https://access.redhat.com/errata/RHSA-2018:2741https://access.redhat.com/errata/RHSA-2018:2742https://access.redhat.com/errata/RHSA-2018:2743https://access.redhat.com/errata/RHSA-2018:2921https://access.redhat.com/errata/RHSA-2018:2930https://access.redhat.com/errata/RHSA-2018:2939