CVEvulnerability
CVE-2017-6056
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-02-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-835
Description
It was discovered that a programming error in the processing of HTTPS requests in the Apache Tomcat servlet and JSP engine may result in denial of service via an infinite loop. The denial of service is easily achievable as a consequence of backporting a CVE-2016-6816 fix but not backporting the fix for Tomcat bug 57544. Distributions affected by this backporting issue include Debian (before 7.0.56-3+deb8u8 and 8.0.14-1+deb8u7 in jessie) and Ubuntu.
Affected configurations
• canonical ubuntu linux 12.04
• canonical ubuntu linux 14.04
• debian debian linux 8.0
Related
Weakness · CWE (1)
- CWE-835 Loop with Unreachable Exit Condition weakness
References
- http://rhn.redhat.com/errata/RHSA-2017-0517.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0826.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0827.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0828.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0829.html Third Party Advisory
- http://www.debian.org/security/2017/dsa-3787 Third Party Advisory
- http://www.debian.org/security/2017/dsa-3788 Third Party Advisory
- http://www.securityfocus.com/bid/96293 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1037860 Third Party Advisory, VDB Entry
- https://bugs.debian.org/851304 Issue Tracking, Third Party Advisory
- https://bz.apache.org/bugzilla/show_bug.cgi?id=60578 Issue Tracking, Third Party Advisory
- https://lists.apache.org/thread.html/6b414817c2b0bf351138911c8c922ec5dd577ebc0b9a7f42d705752d%40%3Cissues.activemq.apache.org%3E lists.apache.org
- https://lists.apache.org/thread.html/ac51944aef91dd5006b8510b0bef337adaccfe962fb90e7af9c22db4%40%3Cissues.activemq.apache.org%3E lists.apache.org
- https://lists.debian.org/debian-security-announce/2017/msg00038.html Third Party Advisory
- https://lists.debian.org/debian-security-announce/2017/msg00039.html Third Party Advisory
- https://security.netapp.com/advisory/ntap-20180731-0002/ Third Party Advisory
- https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html www.oracle.com
- http://rhn.redhat.com/errata/RHSA-2017-0517.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0826.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0827.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0828.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0829.html Third Party Advisory
- http://www.debian.org/security/2017/dsa-3787 Third Party Advisory
- http://www.debian.org/security/2017/dsa-3788 Third Party Advisory
- http://www.securityfocus.com/bid/96293 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1037860 Third Party Advisory, VDB Entry
- https://bugs.debian.org/851304 Issue Tracking, Third Party Advisory
- https://bz.apache.org/bugzilla/show_bug.cgi?id=60578 Issue Tracking, Third Party Advisory
- https://lists.apache.org/thread.html/6b414817c2b0bf351138911c8c922ec5dd577ebc0b9a7f42d705752d%40%3Cissues.activemq.apache.org%3E lists.apache.org
- https://lists.apache.org/thread.html/ac51944aef91dd5006b8510b0bef337adaccfe962fb90e7af9c22db4%40%3Cissues.activemq.apache.org%3E lists.apache.org
- https://lists.debian.org/debian-security-announce/2017/msg00038.html Third Party Advisory
- https://lists.debian.org/debian-security-announce/2017/msg00039.html Third Party Advisory
- https://security.netapp.com/advisory/ntap-20180731-0002/ Third Party Advisory
- https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html www.oracle.com