Apache Tomcat CVE-2019-0199 Denial of Service Vulnerability

Bugtraq ID:	107674
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2019-0199
Remote:	Yes
Local:	No
Published:	Feb 08 2019 12:00AM
Updated:	Jul 17 2019 09:00AM
Credit:	Michal Karm Babacek from Red Hat, Inc
Vulnerable:	Oracle Instantis EnterpriseTrack 17.3 Oracle Instantis EnterpriseTrack 17.2 Oracle Instantis EnterpriseTrack 17.1 Apache Tomcat 9.0.14 Apache Tomcat 9.0.12 Apache Tomcat 9.0.10 Apache Tomcat 9.0.9 Apache Tomcat 9.0.8 Apache Tomcat 9.0.7 Apache Tomcat 9.0.5 Apache Tomcat 9.0.4 Apache Tomcat 9.0.1 Apache Tomcat 8.5.37 Apache Tomcat 8.5.34 Apache Tomcat 8.5.32 Apache Tomcat 8.5.31 Apache Tomcat 8.5.28 Apache Tomcat 8.5.27 Apache Tomcat 8.5.24 Apache Tomcat 8.5.23 Apache Tomcat 8.5.16 Apache Tomcat 8.5.15 Apache Tomcat 8.5.14 Apache Tomcat 8.5.13 Apache Tomcat 8.5.12 Apache Tomcat 8.5.11 Apache Tomcat 8.5.9 Apache Tomcat 8.5.8 Apache Tomcat 8.5.7 Apache Tomcat 8.5.6 Apache Tomcat 8.5.5 Apache Tomcat 8.5.4 Apache Tomcat 8.5.1 Apache Tomcat 9.0.0M8 Apache Tomcat 9.0.0M6 Apache Tomcat 9.0.0.M9 Apache Tomcat 9.0.0.M7 Apache Tomcat 9.0.0.M5 Apache Tomcat 9.0.0.M4 Apache Tomcat 9.0.0.M3 Apache Tomcat 9.0.0.M22 Apache Tomcat 9.0.0.M21 Apache Tomcat 9.0.0.M20 Apache Tomcat 9.0.0.M2 Apache Tomcat 9.0.0.M19 Apache Tomcat 9.0.0.M18 Apache Tomcat 9.0.0.M17 Apache Tomcat 9.0.0.M15 Apache Tomcat 9.0.0.M13 Apache Tomcat 9.0.0.M12 Apache Tomcat 9.0.0.M11 Apache Tomcat 9.0.0.M10 Apache Tomcat 9.0.0.M1 Apache Tomcat 8.5.30 Apache Tomcat 8.5.3 Apache Tomcat 8.5.2 Apache Tomcat 8.5.0
Not Vulnerable:	Apache Tomcat 9.0.16 Apache Tomcat 8.5.38

Apache Tomcat CVE-2019-0199 Denial of Service Vulnerability

Apache Tomcat is prone to a denial-of-service vulnerability.

Attackers may leverage this issue to cause denial-of-service conditions.

The following versions are affected:

Apache Tomcat 9.0.0.M1 through 9.0.14
Apache Tomcat 8.5.0 through 8.5.37

Apache Tomcat CVE-2019-0199 Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Apache Tomcat CVE-2019-0199 Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Apache Tomcat CVE-2019-0199 Denial of Service Vulnerability

References:

• Apache Tomcat 8.x vulnerabilities (Apache)
  
• Apache Tomcat 9.x vulnerabilities (Apache)
  
• Apache Tomcat Homepage (Apache)
  
• Oracle Critical Patch Update Advisory - July 2019 (Oracle)