GHSA-698c-2x4j-g9gq

    Dashboard / Vulnerabilities / GHSA-698c-2x4j-g9gq

    GHSA-698c-2x4j-g9gq

    Published: 14 May 2022Last Modified: 15 Oct 2024
    Aliases:
    CVE-2016-6817

    Summary: Improper Restriction of Operations within the Bounds of a Memory Buffer in Apache Tomcat

    Details: The HTTP/2 header parser in Apache Tomcat 9.0.0.M1 to 9.0.0.M11 and 8.5.0 to 8.5.6 entered an infinite loop if a header was received that was larger than the available buffer. This made a denial of service attack possible.

    References: https://nvd.nist.gov/vuln/detail/CVE-2016-6817, https://github.com/apache/tomcat/commit/079372fc7bac8e2e378942715c9ce26a4a72c07a, https://github.com/apache/tomcat/commit/85c63227edabbfb4f2f500fc557480a190135d21, https://web.archive.org/web/20200227174145/http://www.securityfocus.com/bid/94462, https://web.archive.org/web/20180115024458/http://www.securitytracker.com/id/1037330, https://security.netapp.com/advisory/ntap-20180607-0001, https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc@%3Cdev.tomcat.apache.org%3E, https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E, https://lists.apache.org/thread.html/a9f24571460af003071475b75f18cad81ebcc36fa7c876965a75e32a@%3Cannounce.tomcat.apache.org%3E, https://lists.apache.org/thread.html/a9f24571460af003071475b75f18cad81ebcc36fa7c876965a75e32a%40%3Cannounce.tomcat.apache.org%3E, https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a@%3Cdev.tomcat.apache.org%3E, https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E, https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3@%3Cdev.tomcat.apache.org%3E, https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E, https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551@%3Cdev.tomcat.apache.org%3E, https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E, https://github.com/apache/tomcat, http://www.securityfocus.com/bid/94462, http://www.securitytracker.com/id/1037330

    Affected packages

    Package

    Name: org.apache.tomcat:tomcat

    Purl: pkg:maven/org.apache.tomcat/tomcat

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 9.0.0.M1
    Fixed -9.0.0.M12

    Affected versions

    9.0.0.M1
    9.0.0.M10
    9.0.0.M11
    9.0.0.M3
    9.0.0.M4
    9.0.0.M6
    9.0.0.M8
    9.0.0.M9

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    GHSA-698c-2x4j-g9gq | CVE-DB