ISOMAN

CVE

CVE-2018-8034

The host name verification when using TLS with the WebSocket client was missing. It is now enabled by default. Versions Affected: Apache Tomcat 9.0.0.M1 to 9.0.9, 8.5.0 to 8.5.31, 8.0.0.RC1 to 8.0.52, and 7.0.35 to 7.0.88.

Severity
HIGH
CVSS
7.5
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://mail-archives.us.apache.org/mod_mbox/www-announce/201807.mbox/%3C20180722091057.GA70283%40minotaur.apache.org%3E
  2. http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
  3. http://www.securityfocus.com/bid/104895
  4. http://www.securitytracker.com/id/1041374
  5. https://access.redhat.com/errata/RHSA-2019:0130
  6. https://access.redhat.com/errata/RHSA-2019:0131
  7. https://access.redhat.com/errata/RHSA-2019:0450
  8. https://access.redhat.com/errata/RHSA-2019:0451
  9. https://access.redhat.com/errata/RHSA-2019:1159
  10. https://access.redhat.com/errata/RHSA-2019:1160
  11. https://access.redhat.com/errata/RHSA-2019:1161
  12. https://access.redhat.com/errata/RHSA-2019:1162
  13. https://access.redhat.com/errata/RHSA-2019:1529
  14. https://access.redhat.com/errata/RHSA-2019:2205
  15. https://access.redhat.com/errata/RHSA-2019:3892
  16. https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba%40%3Cdev.tomcat.apache.org%3E
  17. https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E
  18. https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E
  19. https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E
  20. https://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb%40%3Cdev.tomcat.apache.org%3E