CVE-2018-1336
libtomcat8-embed-java: An improper handing of overflow in the UTF-8 decoder with supplementary characters can lead to an infinite loop in th...
CVE-2018-1336 is fixed in 8 products on 1 platform, first by libtomcat8-embed-java 8.5.39-1ubuntu1~18.04.1, released April 10, 2019. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.2035
97th percentile
An improper handing of overflow in the UTF-8 decoder with supplementary characters can lead to an infinite loop in the decoder causing a Denial of Service. Versions Affected: Apache Tomcat 9.0.0.M9 to 9.0.7, 8.5.0 to 8.5.30, 8.0.0.RC1 to 8.0.51, and 7.0.28 to 7.0.86.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| libtomcat8-embed-java · Ubuntu 18.04.6 LTS (bionic) | 8.5.39-1ubuntu1~18.04.1 | libtomcat8-embed-java 8.5.39-1ubuntu1~18.04.1 | Apr 10, 2019 |
| libtomcat8-java · Ubuntu 18.04.6 LTS (bionic) | 8.5.39-1ubuntu1~18.04.1 | libtomcat8-java 8.5.39-1ubuntu1~18.04.1 | Apr 10, 2019 |
| tomcat8 · Ubuntu 18.04.6 LTS (bionic) | 8.5.39-1ubuntu1~18.04.1 | tomcat8 8.5.39-1ubuntu1~18.04.1 | Apr 10, 2019 |
| tomcat8-admin · Ubuntu 18.04.6 LTS (bionic) | 8.5.39-1ubuntu1~18.04.1 | tomcat8-admin 8.5.39-1ubuntu1~18.04.1 | Apr 10, 2019 |
| tomcat8-common · Ubuntu 18.04.6 LTS (bionic) | 8.5.39-1ubuntu1~18.04.1 | tomcat8-common 8.5.39-1ubuntu1~18.04.1 | Apr 10, 2019 |
| tomcat8-docs · Ubuntu 18.04.6 LTS (bionic) | 8.5.39-1ubuntu1~18.04.1 | tomcat8-docs 8.5.39-1ubuntu1~18.04.1 | Apr 10, 2019 |
| tomcat8-examples · Ubuntu 18.04.6 LTS (bionic) | 8.5.39-1ubuntu1~18.04.1 | tomcat8-examples 8.5.39-1ubuntu1~18.04.1 | Apr 10, 2019 |
| tomcat8-user · Ubuntu 18.04.6 LTS (bionic) | 8.5.39-1ubuntu1~18.04.1 | tomcat8-user 8.5.39-1ubuntu1~18.04.1 | Apr 10, 2019 |