CVE-2016-9774

概要

参考情報

• debian.org/security/2016/dsa-3738 · Third Party Advisory
• debian.org/security/2016/dsa-3739 · Third Party Advisory
• openwall.com/lists/oss-security/2016/12/02/10 · Mailing List
• openwall.com/lists/oss-security/2016/12/02/5 · Mailing List
• securityfocus.com/bid/94643 · Third Party Advisory
• ubuntu.com/usn/USN-3177-1 · Third Party Advisory
• ubuntu.com/usn/USN-3177-2 · Third Party Advisory
• bugs.debian.org/cgi-bin/bugreport.cgi · Mailing List
• security.netapp.com/advisory/ntap-20180731-0002

tomcat のその他の脆弱性

• CVE-2026-73180中 6.8Insufficient Session Expiration vulnerability in Apache Tomcat meant that if the session ID for an authenticated HTTP session was changed af…
• CVE-2026-68763高 7.5Uncontrolled Resource Consumption vulnerability in Apache Tomcat via an allocation leak in the HTTP/2 backlog tracking when a stream is rese…
• CVE-2026-68569高 8.1Improper Authentication vulnerability in Apache Tomcat meant that in some circumstances (e.g. CLIENT-CERT, SPNEGO) that a user would be auth…
• CVE-2026-68525緊急 9.1Incorrect Authorization vulnerability in Apache Tomcat's FORM authentication process allows the bypassing of a security constraint that limi…
• CVE-2026-66422高 8.1Improper Authorization vulnerability in Apache Tomcat cause by security-role-ref definitions being incorrectly used as role aliases within t…