Loop with Unreachable Exit Condition ('Infinite Loop') The advisory has been revoked - it doesn't affect any version of package tomcat7 (opens in a new tab)

Threat Intelligence

20.35% (98^th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk IDSNYK-UBUNTU1810-TOMCAT7-651044
published2 Aug 2018
disclosed2 Aug 2018

Report a new vulnerability Found a mistake?

Introduced: 2 Aug 2018

CVE-2018-1336 (opens in a new tab) CWE-835 (opens in a new tab)

Amendment

The Ubuntu security team deemed this advisory irrelevant for Ubuntu:18.10.

NVD Description

Note: Versions mentioned in the description apply only to the upstream tomcat7 package and not the tomcat7 package as distributed by Ubuntu.

An improper handing of overflow in the UTF-8 decoder with supplementary characters can lead to an infinite loop in the decoder causing a Denial of Service. Versions Affected: Apache Tomcat 9.0.0.M9 to 9.0.7, 8.5.0 to 8.5.30, 8.0.0.RC1 to 8.0.51, and 7.0.28 to 7.0.86.