Ubuntu 22.04 LTS USN-6880-1 Critical Tomcat Request Smuggling
ubuntu
July 9, 2024
Tomcat could allow unintended access to network services.
Summary
A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS Summary: Tomcat could allow unintended access to network services. Software Description: - tomcat9: Apache Tomcat 9 - Servlet and JSP engine - tomcat8: Apache Tomcat 8 - Servlet and JSP engine Details: Sam Shahsavar discovered that Apache Tomcat did not properly reject HTTP requests with an invalid Content-Length header. A remote attacker could possibly use this issue to perform HTTP request smuggling attacks.
Topics Covered
Update Instructions
The problem can be corrected by updating your system to the following package versions: Ubuntu 22.04 LTS libtomcat9-java 9.0.58-1ubuntu0.1+esm1 Available with Ubuntu Pro tomcat9 9.0.58-1ubuntu0.1+esm1 Available with Ubuntu Pro Ubuntu 20.04 LTS libtomcat9-java 9.0.31-1ubuntu0.5 tomcat9 9.0.31-1ubuntu0.5 Ubuntu 18.04 LTS libtomcat8-java 8.5.39-1ubuntu1~18.04.3+esm1 Available with Ubuntu Pro libtomcat9-java 9.0.16-3ubuntu0.18.04.2+esm1 Available with Ubuntu Pro tomcat8 8.5.39-1ubuntu1~18.04.3+esm1 Available with Ubuntu Pro tomcat9 9.0.16-3ubuntu0.18.04.2+esm1 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes.
References
https://ubuntu.com/security/notices/USN-6880-1
CVE-2022-42252
PREVIOUS
NEXT
Severity
critical
Lowest
Low
Medium
High
Critical
Ubuntu Security Notice USN-6880-1
Topics Covered
Package Information
https://launchpad.net/ubuntu/+source/tomcat9/9.0.31-1ubuntu0.5
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!