Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 515
Alerts This Week
Warning Icon 1 515

Debian Jessie: DSA-3720-1 Critical Tomcat Timing Attack and Access Issues

debian
Calendar Grey November 21, 2016
Scroller Debian
Enhance your tomcat8 installation to address a variety of security vulnerabilities, including potential username disclosures and unauthorized access risks.
Multiple security vulnerabilities have been discovered in the Tomcat servlet and JSP engine, which may result in possible timing attacks to determine valid user names, bypass of th...
Topics%20covered

Topics Covered

security advisory update critical debian access issue timing attack tomcat

Summary

For the stable distribution (jessie), these problems have been fixed in
version 8.0.14-1+deb8u4.

We recommend that you upgrade your tomcat8 packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/



Severity
critical
Lowest
Low
Medium
High
Critical

Package: tomcat8
CVE ID: CVE-2016-0762 CVE-2016-5018 CVE-2016-6794 CVE-2016-6796

Topics%20covered

Topics Covered

security advisory update critical debian access issue timing attack tomcat

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.