NetSight
IP …
high7.5

CVE-2018-1336

An improper handing of overflow in the UTF-8 decoder with supplementary characters can lead to an infinite loop in the decoder causing a Denial of Service.

Impact

An improper handing of overflow in the UTF-8 decoder with supplementary characters can lead to an infinite loop in the decoder causing a Denial of Service. Versions Affected: Apache Tomcat 9.0.0.M9 to 9.0.7, 8.5.0 to 8.5.30, 8.0.0.RC1 to 8.0.51, and 7.0.28 to 7.0.86.

Affected products

VendorProductAffected versions
ApacheTomcat
from 7.0.28 through 7.0.86
from 8.0.0 through 8.0.51
from 8.5.0 through 8.5.30
from 9.0.1 through 9.0.7
Versions 8.0.0, 9.0.0
RedhatJboss Enterprise Application Platform
Versions 6.0.0, 6.4.0
CanonicalUbuntu Linux
Versions 14.04, 16.04
DebianDebian Linux
Versions 8.0, 9.0
RedhatJboss Enterprise Web Server
Versions 3.0.0, 5.0.0
RedhatEnterprise Linux Desktop
Version 7.0
RedhatEnterprise Linux Server
Version 7.0
RedhatEnterprise Linux Workstation
Version 7.0

Weakness classification

CWE-835

References