Home

CVE-2016-8745

Description

A bug in the error handling of the send file code for the NIO HTTP connector in Apache Tomcat 9.0.0.M1 to 9.0.0.M13, 8.5.0 to 8.5.8, 8.0.0.RC1 to 8.0.39, 7.0.0 to 7.0.73 and 6.0.16 to 6.0.48 resulted in the current Processor object being added to the Processor cache multiple times. This in turn meant that the same Processor could be used for concurrent requests. Sharing a Processor can result in information leakage between requests including, not not limited to, session ID and the response body. The bug was first noticed in 8.5.x onwards where it appears the refactoring of the Connector code for 8.5.x onwards made it more likely that the bug was observed. Initially it was thought that the 8.5.x refactoring introduced the bug but further investigation has shown that the bug is present in all currently supported Tomcat versions.

Risk Information

Base Score
7.5
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score
Exploitation Probability
10.91

Associated Vulnerability

VulnerabilityOS Platform
Update Tomcat to 9.5.14Windows
Update Tomcat to 9.5.5Windows
Update Tomcat to 9.5.7Windows
Update Tomcat to 9.5.8Windows
Update Tomcat to 9.6.10Windows
Update Tomcat to 9.6.3Windows
Update Tomcat to 9.6.4Windows
Update Tomcat to 9.6.7Windows
Update Tomcat to 9.6.8Windows
Update Tomcat to 2.4.5Windows
Update Tomcat to 3.0.14Windows
Vulnerabilities CVE-2016-8745 are fixed in Apache - tomcat 9.0.0Windows
Vulnerabilities CVE-2016-8745 are fixed in Apache - tomcat 8.5.9Windows
Vulnerabilities CVE-2016-8745 are fixed in Apache - tomcat 8.0.41Windows
Vulnerabilities CVE-2016-8745 are fixed in Apache - tomcat 7.0.75Windows
Vulnerabilities CVE-2016-8745 are fixed in Apache - tomcat 6.0.50Windows
Vulnerabilities CVE-2016-8745 are fixed in Apache-tomcat-util 9.0.0Windows
Vulnerabilities CVE-2016-8745 are fixed in Apache-tomcat-util 8.5.9Windows
Vulnerabilities CVE-2016-8745 are fixed in Apache-tomcat-util 8.0.41Windows
Vulnerabilities CVE-2016-8745 are fixed in Apache-tomcat-util 7.0.75Windows
Vulnerabilities CVE-2016-8745 are fixed in Apache-tomcat-util 6.0.50Windows
tomcat7 security update(DSA-3754-1) tomcat7_7.0.56-3+deb8u7_all.debLinux
tomcat8 security update(DSA-3755-1) tomcat8_8.0.14-1+deb8u6_all.debLinux
SUSE-SU-2017:1382-1(SUSE Linux Enterprise Server 12-SP1 ) tomcat-8.0.43-10.19.1.noarch.rpmLinux
SUSE-SU-2017:1382-1(SUSE Linux Enterprise Server 12-SP1 ) tomcat-admin-webapps-8.0.43-10.19.1.noarch.rpmLinux
SUSE-SU-2017:1382-1(SUSE Linux Enterprise Server 12-SP1 ) tomcat-docs-webapp-8.0.43-10.19.1.noarch.rpmLinux
SUSE-SU-2017:1382-1(SUSE Linux Enterprise Server 12-SP1 ) tomcat-el-3_0-api-8.0.43-10.19.1.noarch.rpmLinux
SUSE-SU-2017:1382-1(SUSE Linux Enterprise Server 12-SP1 ) tomcat-javadoc-8.0.43-10.19.1.noarch.rpmLinux
SUSE-SU-2017:1382-1(SUSE Linux Enterprise Server 12-SP1 ) tomcat-jsp-2_3-api-8.0.43-10.19.1.noarch.rpmLinux
SUSE-SU-2017:1382-1(SUSE Linux Enterprise Server 12-SP1 ) tomcat-lib-8.0.43-10.19.1.noarch.rpmLinux
SUSE-SU-2017:1382-1(SUSE Linux Enterprise Server 12-SP1 ) tomcat-servlet-3_1-api-8.0.43-10.19.1.noarch.rpmLinux
SUSE-SU-2017:1382-1(SUSE Linux Enterprise Server 12-SP1 ) tomcat-webapps-8.0.43-10.19.1.noarch.rpmLinux
Update Tomcat to 9.5.14 (For Linux)Linux
Update Tomcat to 9.5.5 (For Linux)Linux
Update Tomcat to 9.5.7 (For Linux)Linux
Update Tomcat to 9.5.8 (For Linux)Linux
Update Tomcat to 9.6.10 (For Linux)Linux
Update Tomcat to 9.6.3 (For Linux)Linux
Update Tomcat to 9.6.4 (For Linux)Linux
Update Tomcat to 9.6.7 (For Linux)Linux
Update Tomcat to 9.6.8 (For Linux)Linux
Update Tomcat to 2.4.5 (For Linux)Linux
Update Tomcat to 3.0.14 (For Linux)Linux
Vulnerabilities CVE-2016-8745 are fixed in Apache - tomcat for Linux 9.0.0Linux
Vulnerabilities CVE-2016-8745 are fixed in Apache - tomcat for Linux 8.5.9Linux
Vulnerabilities CVE-2016-8745 are fixed in Apache - tomcat for Linux 8.0.41Linux
Vulnerabilities CVE-2016-8745 are fixed in Apache - tomcat for Linux 7.0.75Linux
Vulnerabilities CVE-2016-8745 are fixed in Apache - tomcat for Linux 6.0.50Linux
Vulnerabilities CVE-2016-8745 are fixed in Apache-tomcat-util for Linux 9.0.0Linux
Vulnerabilities CVE-2016-8745 are fixed in Apache-tomcat-util for Linux 8.5.9Linux
Vulnerabilities CVE-2016-8745 are fixed in Apache-tomcat-util for Linux 8.0.41Linux
Vulnerabilities CVE-2016-8745 are fixed in Apache-tomcat-util for Linux 7.0.75Linux
Vulnerabilities CVE-2016-8745 are fixed in Apache-tomcat-util for Linux 6.0.50Linux
CVE-2016-8745NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234