USN-3723-1

Dashboard / Vulnerabilities / USN-3723-1

USN-3723-1

Summary: tomcat7, tomcat8 vulnerabilities

Details: It was discovered that Tomcat incorrectly handled decoding certain UTF-8 strings. A remote attacker could possibly use this issue to cause Tomcat to crash, resulting in a denial of service. (CVE-2018-1336) It was discovered that the Tomcat WebSocket client incorrectly performed hostname verification. A remote attacker could possibly use this issue to intercept sensitive information. (CVE-2018-8034)

References: https://ubuntu.com/security/notices/USN-3723-1, https://ubuntu.com/security/CVE-2018-1336, https://ubuntu.com/security/CVE-2018-8034