CVE-2017-6056

7.5 HIGH

Published: February 17, 2017 Modified: May 13, 2026

Description

It was discovered that a programming error in the processing of HTTPS requests in the Apache Tomcat servlet and JSP engine may result in denial of service via an infinite loop. The denial of service is easily achievable as a consequence of backporting a CVE-2016-6816 fix but not backporting the fix for Tomcat bug 57544. Distributions affected by this backporting issue include Debian (before 7.0.56-3+deb8u8 and 8.0.14-1+deb8u7 in jessie) and Ubuntu.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

CVSS v3.x Details

0.0 Low Medium High Critical 10.0

Vector String

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2017-0517.html

Source: cve@mitre.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2017-0826.html

Source: cve@mitre.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2017-0827.html

Source: cve@mitre.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2017-0828.html

Source: cve@mitre.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2017-0829.html

Source: cve@mitre.org

Third Party Advisory

http://www.debian.org/security/2017/dsa-3787

Source: cve@mitre.org

Third Party Advisory

http://www.debian.org/security/2017/dsa-3788

Source: cve@mitre.org

Third Party Advisory

http://www.securityfocus.com/bid/96293

Source: cve@mitre.org

Third Party Advisory VDB Entry

http://www.securitytracker.com/id/1037860

Source: cve@mitre.org

Third Party Advisory VDB Entry

https://bugs.debian.org/851304

Source: cve@mitre.org

Issue Tracking Third Party Advisory

https://bz.apache.org/bugzilla/show_bug.cgi?id=60578

Source: cve@mitre.org

Issue Tracking Third Party Advisory

https://lists.apache.org/thread.html/6b414817c2b0bf351138911c8c922ec5dd577ebc0b9a7f42d705752d%40%3Cissues.activemq.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/ac51944aef91dd5006b8510b0bef337adaccfe962fb90e7af9c22db4%40%3Cissues.activemq.apache.org%3E

Source: cve@mitre.org

https://lists.debian.org/debian-security-announce/2017/msg00038.html

Source: cve@mitre.org

Third Party Advisory

https://lists.debian.org/debian-security-announce/2017/msg00039.html

Source: cve@mitre.org

Third Party Advisory

https://security.netapp.com/advisory/ntap-20180731-0002/

Source: cve@mitre.org

Third Party Advisory

https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2017-0517.html