https://bugzilla.redhat.com/show_bug.cgi?id=1441205
Bug ID: 1441205 Summary: CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used Product: Security Response Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team@redhat.com Reporter: amaris@redhat.com CC: aileenc@redhat.com, alazarot@redhat.com, alee@redhat.com, bbaranow@redhat.com, bmaxwell@redhat.com, ccoleman@redhat.com, cdewolf@redhat.com, chazlett@redhat.com, csutherl@redhat.com, dandread@redhat.com, darran.lofthouse@redhat.com, dedgar@redhat.com, dmcphers@redhat.com, dosoudil@redhat.com, etirelli@redhat.com, felias@redhat.com, gvarsami@redhat.com, gzaronik@redhat.com, hchiorea@redhat.com, hhorak@redhat.com, huwang@redhat.com, ivan.afonichev@gmail.com, java-sig-commits@lists.fedoraproject.org, jawilson@redhat.com, jclere@redhat.com, jcoleman@redhat.com, jdoyle@redhat.com, jgoulding@redhat.com, joelsmith@redhat.com, jolee@redhat.com, jorton@redhat.com, jshepherd@redhat.com, kconner@redhat.com, krzysztof.daniel@gmail.com, kverlaen@redhat.com, ldimaggi@redhat.com, lgao@redhat.com, lpetrovi@redhat.com, mbabacek@redhat.com, mbaluch@redhat.com, me@coolsvap.net, mizdebsk@redhat.com, mwinkler@redhat.com, myarboro@redhat.com, nwallace@redhat.com, pavelp@redhat.com, pgier@redhat.com, psakar@redhat.com, pslavice@redhat.com, psotirop@redhat.com, rnetuka@redhat.com, rrajasek@redhat.com, rsvoboda@redhat.com, rwagner@redhat.com, rzhang@redhat.com, spinder@redhat.com, tcunning@redhat.com, theute@redhat.com, tkirby@redhat.com, trick@vanstaveren.us, twalsh@redhat.com, vhalbert@redhat.com, vtunka@redhat.com, weli@redhat.com
A bug in the handling of the pipelined requests when send file was used resulted in the pipelined request being lost when send file processing of the previous request completed. This could result in responses appearing to be sent for the wrong request. For example, a user agent that sent requests A, B and C could see the correct response for request A, the response for request C for request B and no response for request C.
Affected versions: 6.0.0 to 6.0.52, 7.0.0 to 7.0.76, 8.0.0.RC1 to 8.0.42
Fixed in revisions:
Tomcat 6: https://svn.apache.org/viewvc?view=revision&revision=1789024 https://svn.apache.org/viewvc?view=revision&revision=1789155 https://svn.apache.org/viewvc?view=revision&revision=1789856
Tomcat 7:
https://svn.apache.org/viewvc?view=revision&revision=1789008
Tomcat 8:
https://svn.apache.org/viewvc?view=revision&revision=1788999
References:
https://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.53 https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.77 https://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.0.43
https://bugzilla.redhat.com/show_bug.cgi?id=1441205
Adam Mariš amaris@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Fixed In Version| |tomcat 6.0.53, tomcat | |7.0.77, tomcat 8.0.43
https://bugzilla.redhat.com/show_bug.cgi?id=1441205
Adam Mariš amaris@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Blocks| |1441210 Fixed In Version|tomcat 6.0.53, tomcat |tomcat 6.0.53, tomcat |7.0.77, tomcat 8.0.43 |7.0.77, tomcat 8.0.43, | |tomcat 8.5.13
https://bugzilla.redhat.com/show_bug.cgi?id=1441205
Adam Mariš amaris@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1441242, 1441241, 1441243
--- Comment #1 from Adam Mariš amaris@redhat.com --- Created jbossweb tracking bugs for this issue:
Affects: openshift-1 [bug 1441243]
Created tomcat tracking bugs for this issue:
Affects: epel-6 [bug 1441241] Affects: fedora-all [bug 1441242]
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1441241 [Bug 1441241] CVE-2017-5647 CVE-2017-5648 tomcat: various flaws [epel-6] https://bugzilla.redhat.com/show_bug.cgi?id=1441242 [Bug 1441242] CVE-2017-5647 CVE-2017-5648 CVE-2017-5650 CVE-2017-5651 tomcat: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1441205
Yasuhiro Ozone yozone@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |yozone@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1441205
Hooman Broujerdi hghasemb@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=moderate,public=2017 |impact=moderate,public=2017 |0410,reported=20170410,sour |0410,reported=20170410,sour |ce=internet,cvss3=5.3/CVSS: |ce=internet,cvss3=5.3/CVSS: |3.0/AV:N/AC:L/PR:N/UI:N/S:U |3.0/AV:N/AC:L/PR:N/UI:N/S:U |/C:L/I:N/A:N,cwe=CWE-200,rh |/C:L/I:N/A:N,cwe=CWE-200,rh |el-5/tomcat5=new,rhel-6/tom |el-5/tomcat5=new,rhel-6/tom |cat6=new,rhel-7/tomcat=new, |cat6=new,rhel-7/tomcat=new, |rhscl-2/rh-java-common-tomc |rhscl-2/rh-java-common-tomc |at=new,jbews-2/tomcat6=new, |at=new,jbews-2/tomcat6=new, |jbews-2/tomcat7=new,jws-3/t |jbews-2/tomcat7=new,jws-3/t |omcat7=new,jws-3/tomcat8=ne |omcat7=new,jws-3/tomcat8=ne |w,eap-5/jbossweb=new,eap-6/ |w,eap-5/jbossweb=new,eap-6/ |jbossweb=new,jdg-6/jbossweb |jbossweb=new,jdg-6/jbossweb |=new,jdv-6/jbossweb=new,jpp |=new,jdv-6/jbossweb=new,jpp |-6/jbossweb=new,fuse-6/jbos |-6/jbossweb=new,fuse-6/jbos |sweb=new,fuse-6/karaf=new,f |sweb=new,fuse-6/karaf=notaf |sw-6/jbossweb=new,jon-3/jbo |fected,fsw-6/jbossweb=new,j |ssweb=new,brms-5/jbossweb=n |on-3/jbossweb=new,brms-5/jb |ew,soap-5/jbossweb=new,open |ossweb=new,soap-5/jbossweb= |shift-1/jbossweb=affected,f |new,openshift-1/jbossweb=af |edora-all/tomcat=affected,e |fected,fedora-all/tomcat=af |pel-6/tomcat=affected |fected,epel-6/tomcat=affect | |ed
https://bugzilla.redhat.com/show_bug.cgi?id=1441205
Pavel Polischouk pavelp@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=moderate,public=2017 |impact=moderate,public=2017 |0410,reported=20170410,sour |0410,reported=20170410,sour |ce=internet,cvss3=5.3/CVSS: |ce=internet,cvss3=5.3/CVSS: |3.0/AV:N/AC:L/PR:N/UI:N/S:U |3.0/AV:N/AC:L/PR:N/UI:N/S:U |/C:L/I:N/A:N,cwe=CWE-200,rh |/C:L/I:N/A:N,cwe=CWE-200,rh |el-5/tomcat5=new,rhel-6/tom |el-5/tomcat5=new,rhel-6/tom |cat6=new,rhel-7/tomcat=new, |cat6=new,rhel-7/tomcat=new, |rhscl-2/rh-java-common-tomc |rhscl-2/rh-java-common-tomc |at=new,jbews-2/tomcat6=new, |at=new,jbews-2/tomcat6=new, |jbews-2/tomcat7=new,jws-3/t |jbews-2/tomcat7=new,jws-3/t |omcat7=new,jws-3/tomcat8=ne |omcat7=new,jws-3/tomcat8=ne |w,eap-5/jbossweb=new,eap-6/ |w,eap-5/jbossweb=new,eap-6/ |jbossweb=new,jdg-6/jbossweb |jbossweb=new,jdg-6/jbossweb |=new,jdv-6/jbossweb=new,jpp |=new,jdv-6/jbossweb=notaffe |-6/jbossweb=new,fuse-6/jbos |cted,jpp-6/jbossweb=new,fus |sweb=new,fuse-6/karaf=notaf |e-6/jbossweb=new,fuse-6/kar |fected,fsw-6/jbossweb=new,j |af=notaffected,fsw-6/jbossw |on-3/jbossweb=new,brms-5/jb |eb=wontfix,jon-3/jbossweb=n |ossweb=new,soap-5/jbossweb= |ew,brms-5/jbossweb=wontfix, |new,openshift-1/jbossweb=af |soap-5/jbossweb=wontfix,ope |fected,fedora-all/tomcat=af |nshift-1/jbossweb=affected, |fected,epel-6/tomcat=affect |fedora-all/tomcat=affected, |ed |epel-6/tomcat=affected
https://bugzilla.redhat.com/show_bug.cgi?id=1441205
Timothy Walsh twalsh@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=moderate,public=2017 |impact=moderate,public=2017 |0410,reported=20170410,sour |0410,reported=20170410,sour |ce=internet,cvss3=5.3/CVSS: |ce=internet,cvss3=5.3/CVSS: |3.0/AV:N/AC:L/PR:N/UI:N/S:U |3.0/AV:N/AC:L/PR:N/UI:N/S:U |/C:L/I:N/A:N,cwe=CWE-200,rh |/C:L/I:N/A:N,cwe=CWE-200,rh |el-5/tomcat5=new,rhel-6/tom |el-5/tomcat5=new,rhel-6/tom |cat6=new,rhel-7/tomcat=new, |cat6=new,rhel-7/tomcat=new, |rhscl-2/rh-java-common-tomc |rhscl-2/rh-java-common-tomc |at=new,jbews-2/tomcat6=new, |at=new,jbews-2/tomcat6=new, |jbews-2/tomcat7=new,jws-3/t |jbews-2/tomcat7=new,jws-3/t |omcat7=new,jws-3/tomcat8=ne |omcat7=new,jws-3/tomcat8=ne |w,eap-5/jbossweb=new,eap-6/ |w,eap-5/jbossweb=notaffecte |jbossweb=new,jdg-6/jbossweb |d,eap-6/jbossweb=notaffecte |=new,jdv-6/jbossweb=notaffe |d,jdg-6/jbossweb=new,jdv-6/ |cted,jpp-6/jbossweb=new,fus |jbossweb=notaffected,jpp-6/ |e-6/jbossweb=new,fuse-6/kar |jbossweb=new,fuse-6/jbosswe |af=notaffected,fsw-6/jbossw |b=new,fuse-6/karaf=notaffec |eb=wontfix,jon-3/jbossweb=n |ted,fsw-6/jbossweb=wontfix, |ew,brms-5/jbossweb=wontfix, |jon-3/jbossweb=new,brms-5/j |soap-5/jbossweb=wontfix,ope |bossweb=wontfix,soap-5/jbos |nshift-1/jbossweb=affected, |sweb=wontfix,openshift-1/jb |fedora-all/tomcat=affected, |ossweb=affected,fedora-all/ |epel-6/tomcat=affected |tomcat=affected,epel-6/tomc | |at=affected
https://bugzilla.redhat.com/show_bug.cgi?id=1441205
Timothy Walsh twalsh@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=moderate,public=2017 |impact=moderate,public=2017 |0410,reported=20170410,sour |0410,reported=20170410,sour |ce=internet,cvss3=5.3/CVSS: |ce=internet,cvss3=5.3/CVSS: |3.0/AV:N/AC:L/PR:N/UI:N/S:U |3.0/AV:N/AC:L/PR:N/UI:N/S:U |/C:L/I:N/A:N,cwe=CWE-200,rh |/C:L/I:N/A:N,cwe=CWE-200,rh |el-5/tomcat5=new,rhel-6/tom |el-5/tomcat5=new,rhel-6/tom |cat6=new,rhel-7/tomcat=new, |cat6=new,rhel-7/tomcat=new, |rhscl-2/rh-java-common-tomc |rhscl-2/rh-java-common-tomc |at=new,jbews-2/tomcat6=new, |at=new,jbews-2/tomcat6=affe |jbews-2/tomcat7=new,jws-3/t |cted,jbews-2/tomcat7=affect |omcat7=new,jws-3/tomcat8=ne |ed,jws-3/tomcat7=affected,j |w,eap-5/jbossweb=notaffecte |ws-3/tomcat8=affected,eap-5 |d,eap-6/jbossweb=notaffecte |/jbossweb=notaffected,eap-6 |d,jdg-6/jbossweb=new,jdv-6/ |/jbossweb=notaffected,jdg-6 |jbossweb=notaffected,jpp-6/ |/jbossweb=new,jdv-6/jbosswe |jbossweb=new,fuse-6/jbosswe |b=notaffected,jpp-6/jbosswe |b=new,fuse-6/karaf=notaffec |b=new,fuse-6/jbossweb=new,f |ted,fsw-6/jbossweb=wontfix, |use-6/karaf=notaffected,fsw |jon-3/jbossweb=new,brms-5/j |-6/jbossweb=wontfix,jon-3/j |bossweb=wontfix,soap-5/jbos |bossweb=new,brms-5/jbossweb |sweb=wontfix,openshift-1/jb |=wontfix,soap-5/jbossweb=wo |ossweb=affected,fedora-all/ |ntfix,openshift-1/jbossweb= |tomcat=affected,epel-6/tomc |affected,fedora-all/tomcat= |at=affected |affected,epel-6/tomcat=affe | |cted
https://bugzilla.redhat.com/show_bug.cgi?id=1441205
Timothy Walsh twalsh@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1441479, 1441478
https://bugzilla.redhat.com/show_bug.cgi?id=1441205
Timothy Walsh twalsh@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=moderate,public=2017 |impact=moderate,public=2017 |0410,reported=20170410,sour |0410,reported=20170410,sour |ce=internet,cvss3=5.3/CVSS: |ce=internet,cvss3=5.3/CVSS: |3.0/AV:N/AC:L/PR:N/UI:N/S:U |3.0/AV:N/AC:L/PR:N/UI:N/S:U |/C:L/I:N/A:N,cwe=CWE-200,rh |/C:L/I:N/A:N,cwe=CWE-200,rh |el-5/tomcat5=new,rhel-6/tom |el-5/tomcat5=new,rhel-6/tom |cat6=new,rhel-7/tomcat=new, |cat6=affected,rhel-7/tomcat |rhscl-2/rh-java-common-tomc |=affected,rhscl-2/rh-java-c |at=new,jbews-2/tomcat6=affe |ommon-tomcat=new,jbews-2/to |cted,jbews-2/tomcat7=affect |mcat6=affected,jbews-2/tomc |ed,jws-3/tomcat7=affected,j |at7=affected,jws-3/tomcat7= |ws-3/tomcat8=affected,eap-5 |affected,jws-3/tomcat8=affe |/jbossweb=notaffected,eap-6 |cted,eap-5/jbossweb=notaffe |/jbossweb=notaffected,jdg-6 |cted,eap-6/jbossweb=notaffe |/jbossweb=new,jdv-6/jbosswe |cted,jdg-6/jbossweb=new,jdv |b=notaffected,jpp-6/jbosswe |-6/jbossweb=notaffected,jpp |b=new,fuse-6/jbossweb=new,f |-6/jbossweb=new,fuse-6/jbos |use-6/karaf=notaffected,fsw |sweb=new,fuse-6/karaf=notaf |-6/jbossweb=wontfix,jon-3/j |fected,fsw-6/jbossweb=wontf |bossweb=new,brms-5/jbossweb |ix,jon-3/jbossweb=new,brms- |=wontfix,soap-5/jbossweb=wo |5/jbossweb=wontfix,soap-5/j |ntfix,openshift-1/jbossweb= |bossweb=wontfix,openshift-1 |affected,fedora-all/tomcat= |/jbossweb=affected,fedora-a |affected,epel-6/tomcat=affe |ll/tomcat=affected,epel-6/t |cted |omcat=affected
https://bugzilla.redhat.com/show_bug.cgi?id=1441205
Timothy Walsh twalsh@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1441480, 1441481
https://bugzilla.redhat.com/show_bug.cgi?id=1441205
Timothy Walsh twalsh@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1441483
https://bugzilla.redhat.com/show_bug.cgi?id=1441205
Timothy Walsh twalsh@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1441484
https://bugzilla.redhat.com/show_bug.cgi?id=1441205
Timothy Walsh twalsh@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=moderate,public=2017 |impact=moderate,public=2017 |0410,reported=20170410,sour |0410,reported=20170410,sour |ce=internet,cvss3=5.3/CVSS: |ce=internet,cvss3=5.3/CVSS: |3.0/AV:N/AC:L/PR:N/UI:N/S:U |3.0/AV:N/AC:L/PR:N/UI:N/S:U |/C:L/I:N/A:N,cwe=CWE-200,rh |/C:L/I:N/A:N,cwe=CWE-200,rh |el-5/tomcat5=new,rhel-6/tom |el-5/tomcat5=notaffected,rh |cat6=affected,rhel-7/tomcat |el-6/tomcat6=affected,rhel- |=affected,rhscl-2/rh-java-c |7/tomcat=affected,rhscl-2/r |ommon-tomcat=new,jbews-2/to |h-java-common-tomcat=new,jb |mcat6=affected,jbews-2/tomc |ews-2/tomcat6=affected,jbew |at7=affected,jws-3/tomcat7= |s-2/tomcat7=affected,jws-3/ |affected,jws-3/tomcat8=affe |tomcat7=affected,jws-3/tomc |cted,eap-5/jbossweb=notaffe |at8=affected,eap-5/jbossweb |cted,eap-6/jbossweb=notaffe |=notaffected,eap-6/jbossweb |cted,jdg-6/jbossweb=new,jdv |=notaffected,jdg-6/jbossweb |-6/jbossweb=notaffected,jpp |=new,jdv-6/jbossweb=notaffe |-6/jbossweb=new,fuse-6/jbos |cted,jpp-6/jbossweb=new,fus |sweb=new,fuse-6/karaf=notaf |e-6/jbossweb=new,fuse-6/kar |fected,fsw-6/jbossweb=wontf |af=notaffected,fsw-6/jbossw |ix,jon-3/jbossweb=new,brms- |eb=wontfix,jon-3/jbossweb=n |5/jbossweb=wontfix,soap-5/j |ew,brms-5/jbossweb=wontfix, |bossweb=wontfix,openshift-1 |soap-5/jbossweb=wontfix,ope |/jbossweb=affected,fedora-a |nshift-1/jbossweb=affected, |ll/tomcat=affected,epel-6/t |fedora-all/tomcat=affected, |omcat=affected |epel-6/tomcat=affected
https://bugzilla.redhat.com/show_bug.cgi?id=1441205
Timothy Walsh twalsh@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=moderate,public=2017 |impact=moderate,public=2017 |0410,reported=20170410,sour |0410,reported=20170410,sour |ce=internet,cvss3=5.3/CVSS: |ce=internet,cvss3=5.3/CVSS: |3.0/AV:N/AC:L/PR:N/UI:N/S:U |3.0/AV:N/AC:L/PR:N/UI:N/S:U |/C:L/I:N/A:N,cwe=CWE-200,rh |/C:L/I:N/A:N,cwe=CWE-200,rh |el-5/tomcat5=notaffected,rh |el-5/tomcat5=notaffected,rh |el-6/tomcat6=affected,rhel- |el-6/tomcat6=affected,rhel- |7/tomcat=affected,rhscl-2/r |7/tomcat=affected,rhscl-2/r |h-java-common-tomcat=new,jb |h-java-common-tomcat=new,jb |ews-2/tomcat6=affected,jbew |ews-2/tomcat6=affected,jbew |s-2/tomcat7=affected,jws-3/ |s-2/tomcat7=affected,jws-3/ |tomcat7=affected,jws-3/tomc |tomcat7=affected,jws-3/tomc |at8=affected,eap-5/jbossweb |at8=affected,jbews-3/tomcat |=notaffected,eap-6/jbossweb |7=affected,jbews-3/tomcat8= |=notaffected,jdg-6/jbossweb |affected,eap-5/jbossweb=not |=new,jdv-6/jbossweb=notaffe |affected,eap-6/jbossweb=not |cted,jpp-6/jbossweb=new,fus |affected,jdg-6/jbossweb=new |e-6/jbossweb=new,fuse-6/kar |,jdv-6/jbossweb=notaffected |af=notaffected,fsw-6/jbossw |,jpp-6/jbossweb=new,fuse-6/ |eb=wontfix,jon-3/jbossweb=n |jbossweb=new,fuse-6/karaf=n |ew,brms-5/jbossweb=wontfix, |otaffected,fsw-6/jbossweb=w |soap-5/jbossweb=wontfix,ope |ontfix,jon-3/jbossweb=new,b |nshift-1/jbossweb=affected, |rms-5/jbossweb=wontfix,soap |fedora-all/tomcat=affected, |-5/jbossweb=wontfix,openshi |epel-6/tomcat=affected |ft-1/jbossweb=affected,fedo | |ra-all/tomcat=affected,epel | |-6/tomcat=affected
https://bugzilla.redhat.com/show_bug.cgi?id=1441205
Adam Mariš amaris@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Priority|medium |high Whiteboard|impact=moderate,public=2017 |impact=important,public=201 |0410,reported=20170410,sour |70410,reported=20170410,sou |ce=internet,cvss3=5.3/CVSS: |rce=internet,cvss3=7.5/CVSS |3.0/AV:N/AC:L/PR:N/UI:N/S:U |:3.0/AV:N/AC:L/PR:N/UI:N/S: |/C:L/I:N/A:N,cwe=CWE-200,rh |U/C:H/I:N/A:N,cwe=CWE-200,r |el-5/tomcat5=notaffected,rh |hel-5/tomcat5=notaffected,r |el-6/tomcat6=affected,rhel- |hel-6/tomcat6=affected,rhel |7/tomcat=affected,rhscl-2/r |-7/tomcat=affected,rhscl-2/ |h-java-common-tomcat=new,jb |rh-java-common-tomcat=new,j |ews-2/tomcat6=affected,jbew |bews-2/tomcat6=affected,jbe |s-2/tomcat7=affected,jws-3/ |ws-2/tomcat7=affected,jws-3 |tomcat7=affected,jws-3/tomc |/tomcat7=affected,jws-3/tom |at8=affected,jbews-3/tomcat |cat8=affected,jbews-3/tomca |7=affected,jbews-3/tomcat8= |t7=affected,jbews-3/tomcat8 |affected,eap-5/jbossweb=not |=affected,eap-5/jbossweb=no |affected,eap-6/jbossweb=not |taffected,eap-6/jbossweb=no |affected,jdg-6/jbossweb=new |taffected,jdg-6/jbossweb=ne |,jdv-6/jbossweb=notaffected |w,jdv-6/jbossweb=notaffecte |,jpp-6/jbossweb=new,fuse-6/ |d,jpp-6/jbossweb=new,fuse-6 |jbossweb=new,fuse-6/karaf=n |/jbossweb=new,fuse-6/karaf= |otaffected,fsw-6/jbossweb=w |notaffected,fsw-6/jbossweb= |ontfix,jon-3/jbossweb=new,b |wontfix,jon-3/jbossweb=new, |rms-5/jbossweb=wontfix,soap |brms-5/jbossweb=wontfix,soa |-5/jbossweb=wontfix,openshi |p-5/jbossweb=wontfix,opensh |ft-1/jbossweb=affected,fedo |ift-1/jbossweb=affected,fed |ra-all/tomcat=affected,epel |ora-all/tomcat=affected,epe |-6/tomcat=affected |l-6/tomcat=affected Severity|medium |high
https://bugzilla.redhat.com/show_bug.cgi?id=1441205
Masafumi Miura mmiura@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |mmiura@redhat.com, | |security-response-team@redh | |at.com Flags| |needinfo?(security-response | |-team@redhat.com)
https://bugzilla.redhat.com/show_bug.cgi?id=1441205
Tomas Hoger thoger@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=important,public=201 |impact=important,public=201 |70410,reported=20170410,sou |70410,reported=20170410,sou |rce=internet,cvss3=7.5/CVSS |rce=internet,cvss3=7.5/CVSS |:3.0/AV:N/AC:L/PR:N/UI:N/S: |:3.0/AV:N/AC:L/PR:N/UI:N/S: |U/C:H/I:N/A:N,cwe=CWE-200,r |U/C:H/I:N/A:N,cwe=CWE-200,r |hel-5/tomcat5=notaffected,r |hel-5/tomcat5=notaffected,r |hel-6/tomcat6=affected,rhel |hel-6/tomcat6=affected,rhel |-7/tomcat=affected,rhscl-2/ |-7/tomcat=affected,rhscl-2/ |rh-java-common-tomcat=new,j |rh-java-common-tomcat=notaf |bews-2/tomcat6=affected,jbe |fected,jbews-2/tomcat6=affe |ws-2/tomcat7=affected,jws-3 |cted,jbews-2/tomcat7=affect |/tomcat7=affected,jws-3/tom |ed,jws-3/tomcat7=affected,j |cat8=affected,jbews-3/tomca |ws-3/tomcat8=affected,jbews |t7=affected,jbews-3/tomcat8 |-3/tomcat7=affected,jbews-3 |=affected,eap-5/jbossweb=no |/tomcat8=affected,eap-5/jbo |taffected,eap-6/jbossweb=no |ssweb=notaffected,eap-6/jbo |taffected,jdg-6/jbossweb=ne |ssweb=notaffected,jdg-6/jbo |w,jdv-6/jbossweb=notaffecte |ssweb=new,jdv-6/jbossweb=no |d,jpp-6/jbossweb=new,fuse-6 |taffected,jpp-6/jbossweb=ne |/jbossweb=new,fuse-6/karaf= |w,fuse-6/jbossweb=new,fuse- |notaffected,fsw-6/jbossweb= |6/karaf=notaffected,fsw-6/j |wontfix,jon-3/jbossweb=new, |bossweb=wontfix,jon-3/jboss |brms-5/jbossweb=wontfix,soa |web=new,brms-5/jbossweb=won |p-5/jbossweb=wontfix,opensh |tfix,soap-5/jbossweb=wontfi |ift-1/jbossweb=affected,fed |x,openshift-1/jbossweb=affe |ora-all/tomcat=affected,epe |cted,fedora-all/tomcat=affe |l-6/tomcat=affected |cted,epel-6/tomcat=affected
https://bugzilla.redhat.com/show_bug.cgi?id=1441205
Apurbita Mukherjee apmukher@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |apmukher@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1441205
Timothy Walsh twalsh@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Blocks| |1446026
https://bugzilla.redhat.com/show_bug.cgi?id=1441205
Timothy Walsh twalsh@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Blocks| |1446025
https://bugzilla.redhat.com/show_bug.cgi?id=1441205 Bug 1441205 depends on bug 1441241, which changed state.
Bug 1441241 Summary: CVE-2017-5647 CVE-2017-5648 tomcat: various flaws [epel-6] https://bugzilla.redhat.com/show_bug.cgi?id=1441241
What |Removed |Added ---------------------------------------------------------------------------- Status|ON_QA |CLOSED Resolution|--- |ERRATA
https://bugzilla.redhat.com/show_bug.cgi?id=1441205 Bug 1441205 depends on bug 1441242, which changed state.
Bug 1441242 Summary: CVE-2017-5647 CVE-2017-5648 tomcat: various flaws [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1441242
What |Removed |Added ---------------------------------------------------------------------------- Status|ON_QA |CLOSED Resolution|--- |ERRATA
https://bugzilla.redhat.com/show_bug.cgi?id=1441205
Vincent Danen vdanen@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(security-response |needinfo?(twalsh@redhat.com |-team@redhat.com) |)
https://bugzilla.redhat.com/show_bug.cgi?id=1441205
Timothy Walsh twalsh@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(twalsh@redhat.com | |) |
https://bugzilla.redhat.com/show_bug.cgi?id=1441205
--- Comment #11 from Timothy Walsh twalsh@redhat.com --- Mitigation:
The AJP connector does not support the sendfile capability. A server configured to only use the AJP connector (disable HTTP Connector) is not affected by this vulnerability.
Disable the sendfile capability by setting useSendfile="false" in the HTTP connector configuration. Note: Disabling sendfile, may impact performance on large files.
https://bugzilla.redhat.com/show_bug.cgi?id=1441205
--- Doc Text *updated* by Doran Moppert dmoppert@redhat.com --- A vulnerability was discovered in tomcat's handling of pipelined requests when "Sendfile" was used. If sendfile processing completed quickly, it was possible for the Processor to be added to the processor cache twice. This could lead to invalid responses or information disclosure.
https://bugzilla.redhat.com/show_bug.cgi?id=1441205
Prageetika Sharma pragshar@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |pragshar@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1441205
--- Doc Text *updated* by Eric Christensen sparks@redhat.com --- A vulnerability was discovered in tomcat's handling of pipelined requests when "Sendfile" was used. If sendfile processing completed quickly, it was possible for the Processor to be added to the processor cache twice. This could lead to invalid responses or information disclosure.
https://bugzilla.redhat.com/show_bug.cgi?id=1441205
Kurt Seifried kseifried@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=important,public=201 |impact=important,public=201 |70410,reported=20170410,sou |70410,reported=20170410,sou |rce=internet,cvss3=7.5/CVSS |rce=internet,cvss3=7.5/CVSS |:3.0/AV:N/AC:L/PR:N/UI:N/S: |:3.0/AV:N/AC:L/PR:N/UI:N/S: |U/C:H/I:N/A:N,cwe=CWE-200,r |U/C:H/I:N/A:N,cwe=CWE-200,r |hel-5/tomcat5=notaffected,r |hel-5/tomcat5=notaffected,r |hel-6/tomcat6=affected,rhel |hel-6/tomcat6=affected,rhel |-7/tomcat=affected,rhscl-2/ |-7/tomcat=affected,rhscl-2/ |rh-java-common-tomcat=notaf |rh-java-common-tomcat=notaf |fected,jbews-2/tomcat6=affe |fected,jbews-2/tomcat6=affe |cted,jbews-2/tomcat7=affect |cted,jbews-2/tomcat7=affect |ed,jws-3/tomcat7=affected,j |ed,jws-3/tomcat7=affected,j |ws-3/tomcat8=affected,jbews |ws-3/tomcat8=affected,jbews |-3/tomcat7=affected,jbews-3 |-3/tomcat7=affected,jbews-3 |/tomcat8=affected,eap-5/jbo |/tomcat8=affected,eap-5/jbo |ssweb=notaffected,eap-6/jbo |ssweb=notaffected,eap-6/jbo |ssweb=notaffected,jdg-6/jbo |ssweb=notaffected,jdg-6/jbo |ssweb=new,jdv-6/jbossweb=no |ssweb=new,jdv-6/jbossweb=no |taffected,jpp-6/jbossweb=ne |taffected,jpp-6/jbossweb=ne |w,fuse-6/jbossweb=new,fuse- |w,fuse-6/jbossweb=new,fuse- |6/karaf=notaffected,fsw-6/j |6/karaf=notaffected,fsw-6/j |bossweb=wontfix,jon-3/jboss |bossweb=wontfix,jon-3/jboss |web=new,brms-5/jbossweb=won |web=new,brms-5/jbossweb=won |tfix,soap-5/jbossweb=wontfi |tfix,soap-5/jbossweb=wontfi |x,openshift-1/jbossweb=affe |x,openshift-1/jbossweb=defe |cted,fedora-all/tomcat=affe |r,fedora-all/tomcat=affecte |cted,epel-6/tomcat=affected |d,epel-6/tomcat=affected
https://bugzilla.redhat.com/show_bug.cgi?id=1441205
Kurt Seifried kseifried@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=important,public=201 |impact=important,public=201 |70410,reported=20170410,sou |70410,reported=20170410,sou |rce=internet,cvss3=7.5/CVSS |rce=internet,cvss3=7.5/CVSS |:3.0/AV:N/AC:L/PR:N/UI:N/S: |:3.0/AV:N/AC:L/PR:N/UI:N/S: |U/C:H/I:N/A:N,cwe=CWE-200,r |U/C:H/I:N/A:N,cwe=CWE-200,r |hel-5/tomcat5=notaffected,r |hel-5/tomcat5=notaffected,r |hel-6/tomcat6=affected,rhel |hel-6/tomcat6=affected,rhel |-7/tomcat=affected,rhscl-2/ |-7/tomcat=affected,rhscl-2/ |rh-java-common-tomcat=notaf |rh-java-common-tomcat=notaf |fected,jbews-2/tomcat6=affe |fected,jbews-2/tomcat6=affe |cted,jbews-2/tomcat7=affect |cted,jbews-2/tomcat7=affect |ed,jws-3/tomcat7=affected,j |ed,jws-3/tomcat7=affected,j |ws-3/tomcat8=affected,jbews |ws-3/tomcat8=affected,jbews |-3/tomcat7=affected,jbews-3 |-3/tomcat7=affected,jbews-3 |/tomcat8=affected,eap-5/jbo |/tomcat8=affected,eap-5/jbo |ssweb=notaffected,eap-6/jbo |ssweb=notaffected,eap-6/jbo |ssweb=notaffected,jdg-6/jbo |ssweb=notaffected,jdg-6/jbo |ssweb=new,jdv-6/jbossweb=no |ssweb=new,jdv-6/jbossweb=no |taffected,jpp-6/jbossweb=ne |taffected,jpp-6/jbossweb=ne |w,fuse-6/jbossweb=new,fuse- |w,fuse-6/jbossweb=new,fuse- |6/karaf=notaffected,fsw-6/j |6/karaf=notaffected,fsw-6/j |bossweb=wontfix,jon-3/jboss |bossweb=wontfix,jon-3/jboss |web=new,brms-5/jbossweb=won |web=new,brms-5/jbossweb=won |tfix,soap-5/jbossweb=wontfi |tfix,soap-5/jbossweb=wontfi |x,openshift-1/jbossweb=defe |x,openshift-1/jbossweb=affe |r,fedora-all/tomcat=affecte |cted,fedora-all/tomcat=affe |d,epel-6/tomcat=affected |cted,epel-6/tomcat=affected
https://bugzilla.redhat.com/show_bug.cgi?id=1441205
Doran Moppert dmoppert@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1470597, 1470596
https://bugzilla.redhat.com/show_bug.cgi?id=1441205
--- Comment #17 from errata-xmlrpc errata-xmlrpc@redhat.com --- This issue has been addressed in the following products:
Red Hat JBoss Web Server 3 for RHEL 7 Red Hat JBoss Web Server 3 for RHEL 6
Via RHSA-2017:1801 https://access.redhat.com/errata/RHSA-2017:1801
https://bugzilla.redhat.com/show_bug.cgi?id=1441205
--- Comment #18 from errata-xmlrpc errata-xmlrpc@redhat.com --- This issue has been addressed in the following products:
Text-Only Advisories for JWS
Via RHSA-2017:1802 https://access.redhat.com/errata/RHSA-2017:1802
https://bugzilla.redhat.com/show_bug.cgi?id=1441205
Richa rmarwaha@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Blocks| |1479475
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1479475 [Bug 1479475] EWS 2.1.1 Bundle-1 2017 BZ
https://bugzilla.redhat.com/show_bug.cgi?id=1441205
Pedro Sampaio psampaio@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Blocks| |1482229
https://bugzilla.redhat.com/show_bug.cgi?id=1441205
--- Comment #19 from errata-xmlrpc errata-xmlrpc@redhat.com --- This issue has been addressed in the following products:
Red Hat JBoss Web Server
Via RHSA-2017:2494 https://access.redhat.com/errata/RHSA-2017:2494
https://bugzilla.redhat.com/show_bug.cgi?id=1441205
--- Comment #20 from errata-xmlrpc errata-xmlrpc@redhat.com --- This issue has been addressed in the following products:
Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Red Hat JBoss Enterprise Web Server 2 for RHEL 7
Via RHSA-2017:2493 https://access.redhat.com/errata/RHSA-2017:2493
https://bugzilla.redhat.com/show_bug.cgi?id=1441205
Jason Shepherd jshepherd@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |loleary@redhat.com Whiteboard|impact=important,public=201 |impact=important,public=201 |70410,reported=20170410,sou |70410,reported=20170410,sou |rce=internet,cvss3=7.5/CVSS |rce=internet,cvss3=7.5/CVSS |:3.0/AV:N/AC:L/PR:N/UI:N/S: |:3.0/AV:N/AC:L/PR:N/UI:N/S: |U/C:H/I:N/A:N,cwe=CWE-200,r |U/C:H/I:N/A:N,cwe=CWE-200,r |hel-5/tomcat5=notaffected,r |hel-5/tomcat5=notaffected,r |hel-6/tomcat6=affected,rhel |hel-6/tomcat6=affected,rhel |-7/tomcat=affected,rhscl-2/ |-7/tomcat=affected,rhscl-2/ |rh-java-common-tomcat=notaf |rh-java-common-tomcat=notaf |fected,jbews-2/tomcat6=affe |fected,jbews-2/tomcat6=affe |cted,jbews-2/tomcat7=affect |cted,jbews-2/tomcat7=affect |ed,jws-3/tomcat7=affected,j |ed,jws-3/tomcat7=affected,j |ws-3/tomcat8=affected,jbews |ws-3/tomcat8=affected,jbews |-3/tomcat7=affected,jbews-3 |-3/tomcat7=affected,jbews-3 |/tomcat8=affected,eap-5/jbo |/tomcat8=affected,eap-5/jbo |ssweb=notaffected,eap-6/jbo |ssweb=notaffected,eap-6/jbo |ssweb=notaffected,jdg-6/jbo |ssweb=notaffected,jdg-6/jbo |ssweb=new,jdv-6/jbossweb=no |ssweb=new,jdv-6/jbossweb=no |taffected,jpp-6/jbossweb=ne |taffected,jpp-6/jbossweb=ne |w,fuse-6/jbossweb=new,fuse- |w,fuse-6/jbossweb=new,fuse- |6/karaf=notaffected,fsw-6/j |6/karaf=notaffected,fsw-6/j |bossweb=wontfix,jon-3/jboss |bossweb=wontfix,jon-3/jboss |web=new,brms-5/jbossweb=won |web=notaffected,brms-5/jbos |tfix,soap-5/jbossweb=wontfi |sweb=wontfix,soap-5/jbosswe |x,openshift-1/jbossweb=affe |b=wontfix,openshift-1/jboss |cted,fedora-all/tomcat=affe |web=affected,fedora-all/tom |cted,epel-6/tomcat=affected |cat=affected,epel-6/tomcat= | |affected
https://bugzilla.redhat.com/show_bug.cgi?id=1441205
Doran Moppert dmoppert@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |dmoppert@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1441205
--- Doc Text *updated* by Tomas Hoger thoger@redhat.com --- A vulnerability was discovered in Tomcat's handling of pipelined requests when "Sendfile" was used. If sendfile processing completed quickly, it was possible for the Processor to be added to the processor cache twice. This could lead to invalid responses or information disclosure.
https://bugzilla.redhat.com/show_bug.cgi?id=1441205
--- Comment #21 from errata-xmlrpc errata-xmlrpc@redhat.com --- This issue has been addressed in the following products:
Red Hat Enterprise Linux 6
Via RHSA-2017:3080 https://access.redhat.com/errata/RHSA-2017:3080
https://bugzilla.redhat.com/show_bug.cgi?id=1441205
--- Comment #22 from errata-xmlrpc errata-xmlrpc@redhat.com --- This issue has been addressed in the following products:
Red Hat Enterprise Linux 7
Via RHSA-2017:3081 https://access.redhat.com/errata/RHSA-2017:3081
https://bugzilla.redhat.com/show_bug.cgi?id=1441205
Chess Hazlett chazlett@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=important,public=201 |impact=important,public=201 |70410,reported=20170410,sou |70410,reported=20170409,sou |rce=internet,cvss3=7.5/CVSS |rce=internet,cvss3=7.5/CVSS |:3.0/AV:N/AC:L/PR:N/UI:N/S: |:3.0/AV:N/AC:L/PR:N/UI:N/S: |U/C:H/I:N/A:N,cwe=CWE-200,r |U/C:H/I:N/A:N,cwe=CWE-200,r |hel-5/tomcat5=notaffected,r |hel-5/tomcat5=notaffected,r |hel-6/tomcat6=affected,rhel |hel-6/tomcat6=affected,rhel |-7/tomcat=affected,rhscl-2/ |-7/tomcat=affected,rhscl-2/ |rh-java-common-tomcat=notaf |rh-java-common-tomcat=notaf |fected,jbews-2/tomcat6=affe |fected,jbews-2/tomcat6=affe |cted,jbews-2/tomcat7=affect |cted,jbews-2/tomcat7=affect |ed,jws-3/tomcat7=affected,j |ed,jws-3/tomcat7=affected,j |ws-3/tomcat8=affected,jbews |ws-3/tomcat8=affected,jbews |-3/tomcat7=affected,jbews-3 |-3/tomcat7=affected,jbews-3 |/tomcat8=affected,eap-5/jbo |/tomcat8=affected,eap-5/jbo |ssweb=notaffected,eap-6/jbo |ssweb=notaffected,eap-6/jbo |ssweb=notaffected,jdg-6/jbo |ssweb=notaffected,jdg-6/jbo |ssweb=new,jdv-6/jbossweb=no |ssweb=notaffected,jdv-6/jbo |taffected,jpp-6/jbossweb=ne |ssweb=notaffected,jpp-6/jbo |w,fuse-6/jbossweb=new,fuse- |ssweb=notaffected,fuse-6/jb |6/karaf=notaffected,fsw-6/j |ossweb=new,fuse-6/karaf=not |bossweb=wontfix,jon-3/jboss |affected,fsw-6/jbossweb=won |web=notaffected,brms-5/jbos |tfix,jon-3/jbossweb=notaffe |sweb=wontfix,soap-5/jbosswe |cted,brms-5/jbossweb=wontfi |b=wontfix,openshift-1/jboss |x,soap-5/jbossweb=wontfix,o |web=affected,fedora-all/tom |penshift-1/jbossweb=affecte |cat=affected,epel-6/tomcat= |d,fedora-all/tomcat=affecte |affected |d,epel-6/tomcat=affected
https://bugzilla.redhat.com/show_bug.cgi?id=1441205
Viliam Križan vkrizan@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=important,public=201 |impact=important,public=201 |70410,reported=20170409,sou |70410,reported=20170410,sou |rce=internet,cvss3=7.5/CVSS |rce=internet,cvss3=7.5/CVSS |:3.0/AV:N/AC:L/PR:N/UI:N/S: |:3.0/AV:N/AC:L/PR:N/UI:N/S: |U/C:H/I:N/A:N,cwe=CWE-200,r |U/C:H/I:N/A:N,cwe=CWE-200,r |hel-5/tomcat5=notaffected,r |hel-5/tomcat5=notaffected,r |hel-6/tomcat6=affected,rhel |hel-6/tomcat6=affected,rhel |-7/tomcat=affected,rhscl-2/ |-7/tomcat=affected,rhscl-2/ |rh-java-common-tomcat=notaf |rh-java-common-tomcat=notaf |fected,jbews-2/tomcat6=affe |fected,jbews-2/tomcat6=affe |cted,jbews-2/tomcat7=affect |cted,jbews-2/tomcat7=affect |ed,jws-3/tomcat7=affected,j |ed,jws-3/tomcat7=affected,j |ws-3/tomcat8=affected,jbews |ws-3/tomcat8=affected,jbews |-3/tomcat7=affected,jbews-3 |-3/tomcat7=affected,jbews-3 |/tomcat8=affected,eap-5/jbo |/tomcat8=affected,eap-5/jbo |ssweb=notaffected,eap-6/jbo |ssweb=notaffected,eap-6/jbo |ssweb=notaffected,jdg-6/jbo |ssweb=notaffected,jdg-6/jbo |ssweb=notaffected,jdv-6/jbo |ssweb=notaffected,jdv-6/jbo |ssweb=notaffected,jpp-6/jbo |ssweb=notaffected,jpp-6/jbo |ssweb=notaffected,fuse-6/jb |ssweb=notaffected,fuse-6/jb |ossweb=new,fuse-6/karaf=not |ossweb=new,fuse-6/karaf=not |affected,fsw-6/jbossweb=won |affected,fsw-6/jbossweb=won |tfix,jon-3/jbossweb=notaffe |tfix,jon-3/jbossweb=notaffe |cted,brms-5/jbossweb=wontfi |cted,brms-5/jbossweb=wontfi |x,soap-5/jbossweb=wontfix,o |x,soap-5/jbossweb=wontfix,o |penshift-1/jbossweb=affecte |penshift-1/jbossweb=affecte |d,fedora-all/tomcat=affecte |d,fedora-all/tomcat=affecte |d,epel-6/tomcat=affected |d,epel-6/tomcat=affected
java-sig-commits@lists.fedoraproject.org