Published: 17/04/2017 Updated: 08/12/2023

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 446

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

A bug in the handling of the pipelined requests in Apache Tomcat 9.0.0.M1 to 9.0.0.M18, 8.5.0 to 8.5.12, 8.0.0.RC1 to 8.0.42, 7.0.0 to 7.0.76, and 6.0.0 to 6.0.52, when send file was used, results in the pipelined request being lost when send file processing of the previous request completed. This could result in responses appearing to be sent for the wrong request. For example, a user agent that sent requests A, B and C could see the correct response for request A, the response for request C for request B and no response for request C.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apache tomcat 6.0.33
apache tomcat 6.0.39
apache tomcat 6.0.6
apache tomcat 6.0.11
apache tomcat 6.0.34
apache tomcat 6.0.47
apache tomcat 6.0.22
apache tomcat 6.0.25
apache tomcat 6.0.7
apache tomcat 6.0.4
apache tomcat 6.0.52
apache tomcat 6.0.15
apache tomcat 6.0.42
apache tomcat 6.0.44
apache tomcat 6.0.20
apache tomcat 6.0.21
apache tomcat 6.0.10
apache tomcat 6.0.31
apache tomcat 6.0.29
apache tomcat 6.0.3
apache tomcat 6.0.50
apache tomcat 6.0.9
apache tomcat 6.0.24
apache tomcat 6.0.38
apache tomcat 6.0.23
apache tomcat 6.0.37
apache tomcat 6.0.17
apache tomcat 6.0.32
apache tomcat 6.0.28
apache tomcat 6.0.48
apache tomcat 6.0.0
apache tomcat 6.0.14
apache tomcat 6.0.45
apache tomcat 6.0.41
apache tomcat 6.0.1
apache tomcat 6.0.12
apache tomcat 6.0.18
apache tomcat 6.0.46
apache tomcat 6.0.43
apache tomcat 6.0.5
apache tomcat 6.0.49
apache tomcat 6.0.51
apache tomcat 6.0.30
apache tomcat 6.0.2
apache tomcat 6.0.13
apache tomcat 6.0.40
apache tomcat 6.0.26
apache tomcat 6.0.19
apache tomcat 6.0.27
apache tomcat 6.0.35
apache tomcat 6.0.16
apache tomcat 6.0.36
apache tomcat 6.0.8
apache tomcat 7.0.49
apache tomcat 7.0.12
apache tomcat 7.0.62
apache tomcat 7.0.53
apache tomcat 7.0.20
apache tomcat 7.0.34
apache tomcat 7.0.58
apache tomcat 7.0.8
apache tomcat 7.0.55
apache tomcat 7.0.1
apache tomcat 7.0.2
apache tomcat 7.0.5
apache tomcat 7.0.51
apache tomcat 7.0.63
apache tomcat 7.0.22
apache tomcat 7.0.39
apache tomcat 7.0.26
apache tomcat 7.0.46
apache tomcat 7.0.72
apache tomcat 7.0.76
apache tomcat 7.0.71
apache tomcat 7.0.28
apache tomcat 7.0.59
apache tomcat 7.0.65
apache tomcat 7.0.0
apache tomcat 7.0.50
apache tomcat 7.0.6
apache tomcat 7.0.18
apache tomcat 7.0.14
apache tomcat 7.0.48
apache tomcat 7.0.11
apache tomcat 7.0.67
apache tomcat 7.0.74
apache tomcat 7.0.23
apache tomcat 7.0.66
apache tomcat 7.0.44
apache tomcat 7.0.69
apache tomcat 7.0.7
apache tomcat 7.0.52
apache tomcat 7.0.42
apache tomcat 7.0.60
apache tomcat 7.0.37
apache tomcat 7.0.29
apache tomcat 7.0.45
apache tomcat 7.0.68
apache tomcat 7.0.13
apache tomcat 7.0.47
apache tomcat 7.0.41
apache tomcat 7.0.31
apache tomcat 7.0.30
apache tomcat 7.0.15
apache tomcat 7.0.19
apache tomcat 7.0.75
apache tomcat 7.0.16
apache tomcat 7.0.10
apache tomcat 7.0.36
apache tomcat 7.0.25
apache tomcat 7.0.54
apache tomcat 7.0.35
apache tomcat 7.0.61
apache tomcat 7.0.57
apache tomcat 7.0.43
apache tomcat 7.0.32
apache tomcat 7.0.38
apache tomcat 7.0.21
apache tomcat 7.0.27
apache tomcat 7.0.24
apache tomcat 7.0.17
apache tomcat 7.0.40
apache tomcat 7.0.9
apache tomcat 7.0.4
apache tomcat 7.0.3
apache tomcat 7.0.56
apache tomcat 7.0.64
apache tomcat 7.0.70
apache tomcat 7.0.33
apache tomcat 7.0.73
apache tomcat 8.0.4
apache tomcat 8.0.10
apache tomcat 8.0.30
apache tomcat 8.0.0
apache tomcat 8.0.17
apache tomcat 8.0.7
apache tomcat 8.0.26
apache tomcat 8.0.40
apache tomcat 8.0.2
apache tomcat 8.0.20
apache tomcat 8.0.31
apache tomcat 8.0.5
apache tomcat 8.0.1
apache tomcat 8.0.19
apache tomcat 8.0.39
apache tomcat 8.0.12
apache tomcat 8.0.27
apache tomcat 8.0.15
apache tomcat 8.0.22
apache tomcat 8.0.29
apache tomcat 8.0.42
apache tomcat 8.0.11
apache tomcat 8.0.24
apache tomcat 8.0.36
apache tomcat 8.0.23
apache tomcat 8.0.33
apache tomcat 8.0.6
apache tomcat 8.0.21
apache tomcat 8.0.32
apache tomcat 8.0.41
apache tomcat 8.0.25
apache tomcat 8.0.18
apache tomcat 8.0.35
apache tomcat 8.0.3
apache tomcat 8.0.38
apache tomcat 8.0.13
apache tomcat 8.0.14
apache tomcat 8.0.9
apache tomcat 8.0.16
apache tomcat 8.0.8
apache tomcat 8.0.34
apache tomcat 8.0.28
apache tomcat 8.0.37
apache tomcat 8.5.2
apache tomcat 8.5.9
apache tomcat 8.5.4
apache tomcat 8.5.0
apache tomcat 8.5.10
apache tomcat 8.5.5
apache tomcat 8.5.3
apache tomcat 8.5.6
apache tomcat 8.5.7
apache tomcat 8.5.8
apache tomcat 8.5.12
apache tomcat 8.5.11
apache tomcat 8.5.1
apache tomcat 9.0.0

Several security issues were fixed in Tomcat ...

Synopsis Important: tomcat security update Type/Severity Security Advisory: Important Topic An update for tomcat is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) base score, w ...

Synopsis Important: Red Hat JBoss Web Server 310 Service Pack 1 security update Type/Severity Security Advisory: Important Topic An update is now available for Red Hat JBoss Web Server 31 for RHEL 6 and Red Hat JBoss Web Server 31 for RHEL 7Red Hat Product Security has rated this update as having a sec ...

Synopsis Important: tomcat6 security update Type/Severity Security Advisory: Important Topic An update for tomcat6 is now available for Red Hat Enterprise Linux 6Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) base score, ...

Synopsis Important: Red Hat JBoss Web Server Service Pack 1 security update Type/Severity Security Advisory: Important Topic An update is now available for Red Hat JBoss Web Server 31Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring Sys ...

Debian Bug report logs - #860069 tomcat8: CVE-2017-5647, CVE-2017-5648, CVE-2017-5650, CVE-2017-5651 Package: src:tomcat8; Maintainer for src:tomcat8 is Debian Java Maintainers <pkg-java-maintainers@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Tue, 11 Apr 2017 04:48:01 UTC Owne ...

Debian Bug report logs - #860068 tomcat8: CVE-2017-5647, CVE-2017-5648, CVE-2017-5650, CVE-2017-5651 Package: src:tomcat8; Maintainer for src:tomcat8 is Debian Java Maintainers <pkg-java-maintainers@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Tue, 11 Apr 2017 04:45:02 UTC Owne ...

Debian Bug report logs - #860070 tomcat8: CVE-2017-5647, CVE-2017-5648, CVE-2017-5650, CVE-2017-5651 Package: src:tomcat8; Maintainer for src:tomcat8 is Debian Java Maintainers <pkg-java-maintainers@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Tue, 11 Apr 2017 04:48:04 UTC Owne ...

Debian Bug report logs - #860071 tomcat8: CVE-2017-5647, CVE-2017-5648, CVE-2017-5650, CVE-2017-5651 Package: src:tomcat8; Maintainer for src:tomcat8 is Debian Java Maintainers <pkg-java-maintainers@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Tue, 11 Apr 2017 04:51:02 UTC Owne ...

Two vulnerabilities were discovered in tomcat8, a servlet and JSP engine CVE-2017-5647 Pipelined requests were processed incorrectly, which could result in some responses appearing to be sent for the wrong request CVE-2017-5648 Some application listeners calls were issued against the wrong objects, allowing untrusted applications running ...

Two vulnerabilities were discovered in tomcat7, a servlet and JSP engine CVE-2017-5647 Pipelined requests were processed incorrectly, which could result in some responses appearing to be sent for the wrong request CVE-2017-5648 Some application listeners calls were issued against the wrong objects, allowing untrusted applications running ...

Incorrect handling of pipelined requests when send file was used:A bug in the handling of the pipelined requests in Apache Tomcat 900M1 to 900M18, 850 to 8512, 800RC1 to 8042, 700 to 7076, and 600 to 6052, when send file was used, results in the pipelined request being lost when send file processing of the previous request co ...

Incorrect handling of pipelined requests when send file was usedA bug in the handling of the pipelined requests in Apache Tomcat 900M1 to 900M18, 850 to 8512, 800RC1 to 8042, 700 to 7076, and 600 to 6052, when send file was used, results in the pipelined request being lost when send file processing of the previous request com ...

A vulnerability was discovered in Tomcat's handling of pipelined requests when "Sendfile" was used If sendfile processing completed quickly, it was possible for the Processor to be added to the processor cache twice This could lead to invalid responses or information disclosure ...

Aruba bugs squashed in seven-vuln splatfest

The Register • Richard Chirgwin • 29 May 2017

ClearPass Policy Manager needs upgrade

In case you missed it: there's a bunch of bad bugs in HPE's Aruba ClearPass Policy Manager. The Bugtraq post landed here Friday afternoon US time, a followup to HPE's announcement of a collection of seven CVEs (Common Vulnerabilities and Exposures). HPE hasn't detailed the nature of the vulnerabilities, but they include an unauthenticated remote code execution (RCE) bug (CVE-2017-5824), a privilege escalation bug (CVE-2017-5825), an RCE available to authenticated users (CVE-2017-5826), a reflect...

Get Started

CVE-2017-5647

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Recent Articles

References

Vulmon Search

About

Products

Connect