Improper Restriction of Operations within the Bounds of a Memory Buffer in Apache Tomcat

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2016-6817 · ADVISORY
• apache/tomcat commit 079372f · WEB
• apache/tomcat commit 85c6322 · WEB
• web.archive.org/web/20200227174145/http://www.securityfocus.com/bid/94462 · WEB
• web.archive.org/web/20180115024458/http://www.securitytracker.com/id/1037330 · WEB
• security.netapp.com/advisory/ntap-20180607-0001 · WEB
• lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc@%3Cdev.tomcat.apache.org%3E · WEB
• lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E · WEB
• lists.apache.org/thread.html/a9f24571460af003071475b75f18cad81ebcc36fa7c876965a75e32a@%3Cannounce.tomcat.apache.org%3E

org.apache.tomcat:tomcat のその他の脆弱性

• CVE-2026-68525緊急 9.1Incorrect Authorization vulnerability in Apache Tomcat's FORM authentication process allows the bypassing of a security constraint that limi…
• CVE-2026-65905緊急 9.8Authentication Bypass by Capture-replay vulnerability in Apache Tomcat's DIGEST authenticator. If, before windowSize requests have been made…
• CVE-2026-65182緊急 9.1Improper Access Control, Incorrect Authorization vulnerability in Apache Tomcat leads to security constraint bypass if a constraint for a lo…
• CVE-2026-43515緊急 9.1Improper Authorization vulnerability when multiple method constraints define an HTTP method for the same extension in Apache Tomcat. This i…
• CVE-2026-43514低 3.7Observable Timing Discrepancy vulnerability when comparing AJP secret in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 th…