# CVE-2018-1336: libtomcat8-embed-java: An improper handing of overflow in the UTF-8 decoder with supplementary characters can lead to an infinite loop in th...

CVE-2018-1336 is fixed in 8 products on 1 platform, first by libtomcat8-embed-java 8.5.39-1ubuntu1~18.04.1, released April 10, 2019. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2018-1336
- Priority: Routine
- CVSS: n/a (Medium)
- EPSS: 0.2035
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Jul 23, 2018

## Description

An improper handing of overflow in the UTF-8 decoder with supplementary characters can lead to an infinite loop in the decoder causing a Denial of Service. Versions Affected: Apache Tomcat 9.0.0.M9 to 9.0.7, 8.5.0 to 8.5.30, 8.0.0.RC1 to 8.0.51, and 7.0.28 to 7.0.86.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | libtomcat8-embed-java Ubuntu 18.04.6 LTS (bionic) | 8.5.39-1ubuntu1~18.04.1 | [libtomcat8-embed-java 8.5.39-1ubuntu1~18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libtomcat8-embed-java-8.5.39-1ubuntu1-18.04.1.md) | Apr 10, 2019 |
| Linux | libtomcat8-java Ubuntu 18.04.6 LTS (bionic) | 8.5.39-1ubuntu1~18.04.1 | [libtomcat8-java 8.5.39-1ubuntu1~18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libtomcat8-java-8.5.39-1ubuntu1-18.04.1.md) | Apr 10, 2019 |
| Linux | tomcat8 Ubuntu 18.04.6 LTS (bionic) | 8.5.39-1ubuntu1~18.04.1 | [tomcat8 8.5.39-1ubuntu1~18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-tomcat8-8.5.39-1ubuntu1-18.04.1.md) | Apr 10, 2019 |
| Linux | tomcat8-admin Ubuntu 18.04.6 LTS (bionic) | 8.5.39-1ubuntu1~18.04.1 | [tomcat8-admin 8.5.39-1ubuntu1~18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-tomcat8-admin-8.5.39-1ubuntu1-18.04.1.md) | Apr 10, 2019 |
| Linux | tomcat8-common Ubuntu 18.04.6 LTS (bionic) | 8.5.39-1ubuntu1~18.04.1 | [tomcat8-common 8.5.39-1ubuntu1~18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-tomcat8-common-8.5.39-1ubuntu1-18.04.1.md) | Apr 10, 2019 |
| Linux | tomcat8-docs Ubuntu 18.04.6 LTS (bionic) | 8.5.39-1ubuntu1~18.04.1 | [tomcat8-docs 8.5.39-1ubuntu1~18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-tomcat8-docs-8.5.39-1ubuntu1-18.04.1.md) | Apr 10, 2019 |
| Linux | tomcat8-examples Ubuntu 18.04.6 LTS (bionic) | 8.5.39-1ubuntu1~18.04.1 | [tomcat8-examples 8.5.39-1ubuntu1~18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-tomcat8-examples-8.5.39-1ubuntu1-18.04.1.md) | Apr 10, 2019 |
| Linux | tomcat8-user Ubuntu 18.04.6 LTS (bionic) | 8.5.39-1ubuntu1~18.04.1 | [tomcat8-user 8.5.39-1ubuntu1~18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-tomcat8-user-8.5.39-1ubuntu1-18.04.1.md) | Apr 10, 2019 |

---

Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo