Alerts This Week
Warning Icon 1 1,295
Alerts This Week
Warning Icon 1 1,295

Ubuntu 22.04 LTS USN-6880-1 Critical Tomcat Request Smuggling

ubuntu
Calendar Grey July 9, 2024
Dist Ubuntu Esm H88
Critical Tomcat flaw in Ubuntu versions patched with security fixes on July 09, 2024. Discover further details on the matter.
Tomcat could allow unintended access to network services.

Summary

Tomcat could allow unintended access to network services.

Software Description:

- tomcat9: Apache Tomcat 9 - Servlet and JSP engine

- tomcat8: Apache Tomcat 8 - Servlet and JSP engine

Details:

Sam Shahsavar discovered that Apache Tomcat did not properly reject

HTTP requests with an invalid Content-Length header. A remote attacker

could possibly use this issue to perform HTTP request smuggling attacks.

Topics%20covered

Topics Covered

security advisory critical Ubuntu tomcat network access HTTP attack

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 22.04 LTS
   libtomcat9-java                 9.0.58-1ubuntu0.1+esm1
                                   Available with Ubuntu Pro
   tomcat9                         9.0.58-1ubuntu0.1+esm1
                                   Available with Ubuntu Pro

Ubuntu 20.04 LTS
   libtomcat9-java                 9.0.31-1ubuntu0.5
   tomcat9                         9.0.31-1ubuntu0.5

Ubuntu 18.04 LTS
   libtomcat8-java                 8.5.39-1ubuntu1~18.04.3+esm1
                                   Available with Ubuntu Pro
   libtomcat9-java                 9.0.16-3ubuntu0.18.04.2+esm1
                                   Available with Ubuntu Pro
   tomcat8                         8.5.39-1ubuntu1~18.04.3+esm1
                                   Available with Ubuntu Pro
   tomcat9                         9.0.16-3ubuntu0.18.04.2+esm1
                                   Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-6880-1

CVE-2022-42252

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-6880-1

Topics%20covered

Topics Covered

security advisory critical Ubuntu tomcat network access HTTP attack

Package Information

https://launchpad.net/ubuntu/+source/tomcat9/9.0.31-1ubuntu0.5

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here