USN-3204-1: Tomcat vulnerability
Ubuntu Security Notice USN-3204-1
20th February, 2017
tomcat6, tomcat7 vulnerability
A security issue affects these releases of Ubuntu and its
derivatives:
- Ubuntu 14.04 LTS
- Ubuntu 12.04 LTS
Summary
Tomcat could be made to consume resources if it received specially crafted
network traffic.
Software description
- tomcat6
– Servlet and JSP engine - tomcat7
– Servlet and JSP engine
Details
It was discovered that Tomcat incorrectly handled certain HTTP requests. A
remote attacker could possibly use this issue to cause Tomcat to consume
resources, resulting in a denial of service.
Update instructions
The problem can be corrected by updating your system to the following
package version:
- Ubuntu 14.04 LTS:
-
tomcat7
7.0.52-1ubuntu0.10
-
libtomcat7-java
7.0.52-1ubuntu0.10
- Ubuntu 12.04 LTS:
-
libtomcat6-java
6.0.35-1ubuntu3.11
-
tomcat6
6.0.35-1ubuntu3.11
To update your system, please follow these instructions:
https://wiki.ubuntu.com/Security/Upgrades.
In general, a standard system update will make all the necessary changes.
References
Source: USN-3204-1: Tomcat vulnerability
