Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 542
Alerts This Week
Warning Icon 1 542

Debian 7.0 DSA-3787-1 Moderate: Apache Tomcat7 DoS Issue

debian
Calendar Grey February 13, 2017
Scroller Debian
Apache Tomcat8 security enhancement released to address potential denial of service from infinite loop vulnerabilities, essential update advised for Ubuntu.
It was discovered that a programming error in the processing of HTTPS requests in the Apache Tomcat servlet and JSP engine may result in denial of service via an infinite loop

Summary

It was discovered that a programming error in the processing of HTTPS
requests in the Apache Tomcat servlet and JSP engine may result in
denial of service via an infinite loop.

For the stable distribution (jessie), this problem has been fixed in
version 7.0.56-3+deb8u8.

We recommend that you upgrade your tomcat7 packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/



Severity
important
Lowest
Low
Medium
High
Critical

Package: tomcat7
CVE ID: not yet available

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.