Vulnerability Description
If an async request was completed by the application at the same time as the container triggered the async timeout, a race condition existed that could result in a user seeing a response intended for a different user. An additional issue was present in the NIO and NIO2 connectors that did not correctly track the closure of the connection when an async request was completed by the application and timed out by the container at the same time. This could also result in a user seeing a response intended for another user. Versions Affected: Apache Tomcat 9.0.0.M9 to 9.0.9 and 8.5.5 to 8.5.31.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apache | Tomcat | >= 8.5.5, <= 8.5.31 |
| Debian | Debian Linux | 9.0 |
Related Weaknesses (CWE)
References
- http://mail-archives.us.apache.org/mod_mbox/www-announce/201807.mbox/%3C20180722Mailing ListVendor Advisory
- http://mail-archives.us.apache.org/mod_mbox/www-announce/201808.mbox/%3C0c616b4dMailing ListVendor Advisory
- http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.htmlPatchThird Party Advisory
- http://www.securityfocus.com/bid/104894Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1041376Third Party AdvisoryVDB Entry
- https://access.redhat.com/errata/RHSA-2018:2867Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:2868Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:1529
- https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55a
- https://lists.apache.org/thread.html/2ee3af8a43cb019e7898c9330cc8e73306553a27f2e
- https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e8
- https://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b13
- https://lists.apache.org/thread.html/5d15316dfb4adf75d96d394745f8037533fa3bcc1ac
- https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3
- https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77
FAQ
What is CVE-2018-8037?
CVE-2018-8037 is a vulnerability with a CVSS score of 5.9 (MEDIUM). If an async request was completed by the application at the same time as the container triggered the async timeout, a race condition existed that could result in a user seeing a response intended for ...
How severe is CVE-2018-8037?
CVE-2018-8037 has been rated MEDIUM with a CVSS base score of 5.9/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-8037?
Check the references section above for vendor advisories and patch information. Affected products include: Apache Tomcat, Debian Debian Linux.