Vulnerability Name:

CVE-2017-5650 (CCN-124398)

Assigned:2017-03-30
Published:2017-03-30
Updated:2019-10-03
Summary:In Apache Tomcat 9.0.0.M1 to 9.0.0.M18 and 8.5.0 to 8.5.12, the handling of an HTTP/2 GOAWAY frame for a connection did not close streams associated with that connection that were currently waiting for a WINDOW_UPDATE before allowing the application to write more data. These waiting streams each consumed a thread. A malicious client could therefore construct a series of HTTP/2 requests that would consume all available processing threads.
CVSS v3 Severity:7.5 High (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
6.5 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): High
7.5 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
6.5 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): High
CVSS v2 Severity:5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Partial
7.8 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Complete
Vulnerability Type:CWE-404
Vulnerability Consequences:Denial of Service
References:Source: MITRE
Type: CNA
CVE-2017-5650

Source: CCN
Type: Apache Web site
Fixed in Apache Tomcat 9.0.0.M19

Source: CCN
Type: IBM Security Bulletin C1000302 (UrbanCode Deploy)
Multiple Vulnerabilities in Apache Tomcat affects IBM UrbanCode Deploy (CVE-2017-5647, CVE-2017-5650)

Source: CONFIRM
Type: UNKNOWN
http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html

Source: BID
Type: Third Party Advisory, VDB Entry
97531

Source: CCN
Type: BID-97531
Apache Tomcat CVE-2017-5650 Denial of Service Vulnerability

Source: SECTRACK
Type: UNKNOWN
1038217

Source: XF
Type: UNKNOWN
apache-tomcat-cve20175650-dos(124398)

Source: MLIST
Type: UNKNOWN
[tomcat-dev] 20190319 svn commit: r1855831 [25/30] - in /tomcat/site/trunk: ./ docs/ xdocs/

Source: MLIST
Type: UNKNOWN
[tomcat-dev] 20190415 svn commit: r1857582 [19/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/

Source: MLIST
Type: UNKNOWN
[tomcat-dev] 20190413 svn commit: r1857494 [17/20] - in /tomcat/site/trunk: ./ docs/ xdocs/

Source: MLIST
Type: UNKNOWN
[tomcat-dev] 20190325 svn commit: r1856174 [24/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/

Source: MLIST
Type: Mailing List, Vendor Advisory
[users] 20170410 [SECURITY] CVE-2017-5650 Apache Tomcat Denial of Service

Source: MLIST
Type: UNKNOWN
[tomcat-dev] 20190319 svn commit: r1855831 [24/30] - in /tomcat/site/trunk: ./ docs/ xdocs/

Source: MLIST
Type: UNKNOWN
[tomcat-dev] 20200203 svn commit: r1873527 [25/30] - /tomcat/site/trunk/docs/

Source: MLIST
Type: UNKNOWN
[tomcat-dev] 20200213 svn commit: r1873980 [29/34] - /tomcat/site/trunk/docs/

Source: GENTOO
Type: UNKNOWN
GLSA-201705-09

Source: CONFIRM
Type: UNKNOWN
https://security.netapp.com/advisory/ntap-20180614-0001/

Vulnerable Configuration:Configuration 1:
  • cpe:/a:apache:tomcat:8.5.0:*:*:*:*:*:*:*
  • OR cpe:/a:apache:tomcat:8.5.1:*:*:*:*:*:*:*
  • OR cpe:/a:apache:tomcat:8.5.2:*:*:*:*:*:*:*
  • OR cpe:/a:apache:tomcat:8.5.3:*:*:*:*:*:*:*
  • OR cpe:/a:apache:tomcat:8.5.4:*:*:*:*:*:*:*
  • OR cpe:/a:apache:tomcat:8.5.5:*:*:*:*:*:*:*
  • OR cpe:/a:apache:tomcat:8.5.6:*:*:*:*:*:*:*
  • OR cpe:/a:apache:tomcat:8.5.7:*:*:*:*:*:*:*
  • OR cpe:/a:apache:tomcat:8.5.8:*:*:*:*:*:*:*
  • OR cpe:/a:apache:tomcat:8.5.9:*:*:*:*:*:*:*
  • OR cpe:/a:apache:tomcat:8.5.10:*:*:*:*:*:*:*
  • OR cpe:/a:apache:tomcat:8.5.11:*:*:*:*:*:*:*
  • OR cpe:/a:apache:tomcat:8.5.12:*:*:*:*:*:*:*

    • Configuration 2:
  • cpe:/a:apache:tomcat:9.0.0:m1:*:*:*:*:*:*
  • OR cpe:/a:apache:tomcat:9.0.0:m10:*:*:*:*:*:*
  • OR cpe:/a:apache:tomcat:9.0.0:m11:*:*:*:*:*:*
  • OR cpe:/a:apache:tomcat:9.0.0:m12:*:*:*:*:*:*
  • OR cpe:/a:apache:tomcat:9.0.0:m13:*:*:*:*:*:*
  • OR cpe:/a:apache:tomcat:9.0.0:m14:*:*:*:*:*:*
  • OR cpe:/a:apache:tomcat:9.0.0:m15:*:*:*:*:*:*
  • OR cpe:/a:apache:tomcat:9.0.0:m16:*:*:*:*:*:*
  • OR cpe:/a:apache:tomcat:9.0.0:m17:*:*:*:*:*:*
  • OR cpe:/a:apache:tomcat:9.0.0:m18:*:*:*:*:*:*
  • OR cpe:/a:apache:tomcat:9.0.0:m2:*:*:*:*:*:*
  • OR cpe:/a:apache:tomcat:9.0.0:m3:*:*:*:*:*:*
  • OR cpe:/a:apache:tomcat:9.0.0:m4:*:*:*:*:*:*
  • OR cpe:/a:apache:tomcat:9.0.0:m5:*:*:*:*:*:*
  • OR cpe:/a:apache:tomcat:9.0.0:m6:*:*:*:*:*:*
  • OR cpe:/a:apache:tomcat:9.0.0:m7:*:*:*:*:*:*
  • OR cpe:/a:apache:tomcat:9.0.0:m8:*:*:*:*:*:*
  • OR cpe:/a:apache:tomcat:9.0.0:m9:*:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/a:apache:tomcat:8.0:*:*:*:*:*:*:*
  • AND
  • cpe:/a:ibm:urbancode_deploy:6.2.3.0:*:*:*:*:*:*:*
  • OR cpe:/a:ibm:urbancode_deploy:6.2.3.1:*:*:*:*:*:*:*
  • OR cpe:/a:ibm:urbancode_deploy:6.2.4:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:com.ubuntu.xenial:def:20175650000
    V
    		CVE-2017-5650 on Ubuntu 16.04 LTS (xenial) - medium.
    2017-04-17
    oval:com.ubuntu.xenial:def:201756500000000
    V
    		CVE-2017-5650 on Ubuntu 16.04 LTS (xenial) - medium.
    2017-04-17
    BACK
    apache tomcat 8.5.0
    apache tomcat 8.5.1
    apache tomcat 8.5.2
    apache tomcat 8.5.3
    apache tomcat 8.5.4
    apache tomcat 8.5.5
    apache tomcat 8.5.6
    apache tomcat 8.5.7
    apache tomcat 8.5.8
    apache tomcat 8.5.9
    apache tomcat 8.5.10
    apache tomcat 8.5.11
    apache tomcat 8.5.12
    apache tomcat 9.0.0 m1
    apache tomcat 9.0.0 m10
    apache tomcat 9.0.0 m11
    apache tomcat 9.0.0 m12
    apache tomcat 9.0.0 m13
    apache tomcat 9.0.0 m14
    apache tomcat 9.0.0 m15
    apache tomcat 9.0.0 m16
    apache tomcat 9.0.0 m17
    apache tomcat 9.0.0 m18
    apache tomcat 9.0.0 m2
    apache tomcat 9.0.0 m3
    apache tomcat 9.0.0 m4
    apache tomcat 9.0.0 m5
    apache tomcat 9.0.0 m6
    apache tomcat 9.0.0 m7
    apache tomcat 9.0.0 m8
    apache tomcat 9.0.0 m9
    apache tomcat 8.0
    ibm urbancode deploy 6.2.3.0
    ibm urbancode deploy 6.2.3.1
    ibm urbancode deploy 6.2.4