https://bugzilla.redhat.com/show_bug.cgi?id=1422148
Bug ID: 1422148
Summary: tomcat: Infinite loop in the processing of https
requests
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: high
Priority: high
Assignee: security-response-team(a)redhat.com
Reporter: anemec(a)redhat.com
CC: alee(a)redhat.com, bbaranow(a)redhat.com,
bmaxwell(a)redhat.com, cdewolf(a)redhat.com,
csutherl(a)redhat.com, dandread(a)redhat.com,
darran.lofthouse(a)redhat.com, dosoudil(a)redhat.com,
gzaronik(a)redhat.com, hhorak(a)redhat.com,
ivan.afonichev(a)gmail.com,
java-sig-commits(a)lists.fedoraproject.org,
jawilson(a)redhat.com, jclere(a)redhat.com,
jdoyle(a)redhat.com, jorton(a)redhat.com,
krzysztof.daniel(a)gmail.com, lgao(a)redhat.com,
mbabacek(a)redhat.com, me(a)coolsvap.net,
mizdebsk(a)redhat.com, myarboro(a)redhat.com,
pgier(a)redhat.com, psakar(a)redhat.com,
pslavice(a)redhat.com, rnetuka(a)redhat.com,
rsvoboda(a)redhat.com, trick(a)vanstaveren.us,
twalsh(a)redhat.com, vtunka(a)redhat.com, weli(a)redhat.com
It was discovered that a programming error in the processing of HTTPS requests
in the Apache Tomcat servlet and JSP engine may result in denial of service via
an infinite loop.
Upstream patch:
https://github.com/apache/tomcat80/commit/614e7f78aecc429d8740bb59900c2f9...
Upstream bug:
https://bz.apache.org/bugzilla/show_bug.cgi?id=57544
--
You are receiving this mail because:
You are on the CC list for the bug.