1 line
31 KiB
JSON
1 line
31 KiB
JSON
{"document":{"aggregate_severity":{"namespace":"https://www.suse.com/support/security/rating/","text":"moderate"},"category":"csaf_vex","csaf_version":"2.0","distribution":{"text":"Copyright 2024 SUSE LLC. All rights reserved.","tlp":{"label":"WHITE","url":"https://www.first.org/tlp/"}},"lang":"en","notes":[{"category":"summary","text":"SUSE CVE-2017-6056","title":"Title"},{"category":"description","text":"It was discovered that a programming error in the processing of HTTPS requests in the Apache Tomcat servlet and JSP engine may result in denial of service via an infinite loop. The denial of service is easily achievable as a consequence of backporting a CVE-2016-6816 fix but not backporting the fix for Tomcat bug 57544. Distributions affected by this backporting issue include Debian (before 7.0.56-3+deb8u8 and 8.0.14-1+deb8u7 in jessie) and Ubuntu.","title":"Description of the CVE"},{"category":"legal_disclaimer","text":"CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).","title":"Terms of use"}],"publisher":{"category":"vendor","contact_details":"https://www.suse.com/support/security/contact/","name":"SUSE Product Security Team","namespace":"https://www.suse.com/"},"references":[{"category":"external","summary":"CVE-2017-6056","url":"https://www.suse.com/security/cve/CVE-2017-6056"},{"category":"external","summary":"SUSE Security Ratings","url":"https://www.suse.com/support/security/rating/"},{"category":"external","summary":"SUSE Bug 1025205 for CVE-2017-6056","url":"https://bugzilla.suse.com/1025205"}],"title":"SUSE CVE CVE-2017-6056","tracking":{"current_release_date":"2026-07-26T00:44:39Z","generator":{"date":"2026-05-13T16:09:47Z","engine":{"name":"cve-database.git:bin/generate-csaf-vex.pl","version":"1"}},"id":"CVE-2017-6056","initial_release_date":"2026-05-13T16:09:47Z","revision_history":[{"date":"2026-05-13T16:09:47Z","number":"2","summary":"vulnerabilities added,references added,severity changed from to moderate"},{"date":"2026-07-26T00:44:39Z","number":"3","summary":"more updates marked as not affected"}],"status":"interim","version":"3"}},"product_tree":{"branches":[{"branches":[{"branches":[{"category":"product_name","name":"SUSE Linux Enterprise High Performance Computing 12 SP1","product":{"name":"SUSE Linux Enterprise High Performance Computing 12 SP1","product_id":"SUSE Linux Enterprise High Performance Computing 12 SP1","product_identification_helper":{"cpe":"cpe:/o:suse:sle_hpc:12:sp1"}}},{"category":"product_name","name":"SUSE Linux Enterprise High Performance Computing 12 SP2","product":{"name":"SUSE Linux Enterprise High Performance Computing 12 SP2","product_id":"SUSE Linux Enterprise High Performance Computing 12 SP2","product_identification_helper":{"cpe":"cpe:/o:suse:sle-hpc:12:sp2"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server 11 SP1 for Teradata","product":{"name":"SUSE Linux Enterprise Server 11 SP1 for Teradata","product_id":"SUSE Linux Enterprise Server 11 SP1 for Teradata","product_identification_helper":{"cpe":"cpe:/o:suse:suse_sles_teradata:11:sp1"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server 11 SP3 for Teradata","product":{"name":"SUSE Linux Enterprise Server 11 SP3 for Teradata","product_id":"SUSE Linux Enterprise Server 11 SP3 for Teradata","product_identification_helper":{"cpe":"cpe:/o:suse:suse_sles_teradata:11:sp3"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server 11 SP4","product":{"name":"SUSE Linux Enterprise Server 11 SP4","product_id":"SUSE Linux Enterprise Server 11 SP4","product_identification_helper":{"cpe":"cpe:/o:suse:suse_sles:11:sp4"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server 11 SP4-LTSS","product":{"name":"SUSE Linux Enterprise Server 11 SP4-LTSS","product_id":"SUSE Linux Enterprise Server 11 SP4-LTSS","product_identification_helper":{"cpe":"cpe:/o:suse:suse_sles:11:sp4"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server 12 SP1","product":{"name":"SUSE Linux Enterprise Server 12 SP1","product_id":"SUSE Linux Enterprise Server 12 SP1","product_identification_helper":{"cpe":"cpe:/o:suse:sles:12:sp1"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server 12 SP2","product":{"name":"SUSE Linux Enterprise Server 12 SP2","product_id":"SUSE Linux Enterprise Server 12 SP2","product_identification_helper":{"cpe":"cpe:/o:suse:sles:12:sp2"}}},{"category":"product_version","name":"tomcat","product":{"name":"tomcat","product_id":"tomcat","product_identification_helper":{"cpe":"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*","purl":"pkg:rpm/suse/tomcat@?upstream=tomcat.src.rpm"}}},{"category":"product_version","name":"tomcat-admin-webapps","product":{"name":"tomcat-admin-webapps","product_id":"tomcat-admin-webapps","product_identification_helper":{"cpe":"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*","purl":"pkg:rpm/suse/tomcat-admin-webapps@?upstream=tomcat.src.rpm"}}},{"category":"product_version","name":"tomcat-docs-webapp","product":{"name":"tomcat-docs-webapp","product_id":"tomcat-docs-webapp","product_identification_helper":{"cpe":"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*","purl":"pkg:rpm/suse/tomcat-docs-webapp@?upstream=tomcat.src.rpm"}}},{"category":"product_version","name":"tomcat-el-3_0-api","product":{"name":"tomcat-el-3_0-api","product_id":"tomcat-el-3_0-api","product_identification_helper":{"cpe":"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*","purl":"pkg:rpm/suse/tomcat-el-3_0-api@?upstream=tomcat.src.rpm"}}},{"category":"product_version","name":"tomcat-javadoc","product":{"name":"tomcat-javadoc","product_id":"tomcat-javadoc","product_identification_helper":{"cpe":"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*","purl":"pkg:rpm/suse/tomcat-javadoc@?upstream=tomcat.src.rpm"}}},{"category":"product_version","name":"tomcat-jsp-2_3-api","product":{"name":"tomcat-jsp-2_3-api","product_id":"tomcat-jsp-2_3-api","product_identification_helper":{"cpe":"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*","purl":"pkg:rpm/suse/tomcat-jsp-2_3-api@?upstream=tomcat.src.rpm"}}},{"category":"product_version","name":"tomcat-lib","product":{"name":"tomcat-lib","product_id":"tomcat-lib","product_identification_helper":{"cpe":"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*","purl":"pkg:rpm/suse/tomcat-lib@?upstream=tomcat.src.rpm"}}},{"category":"product_version","name":"tomcat-servlet-3_1-api","product":{"name":"tomcat-servlet-3_1-api","product_id":"tomcat-servlet-3_1-api","product_identification_helper":{"cpe":"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*","purl":"pkg:rpm/suse/tomcat-servlet-3_1-api@?upstream=tomcat.src.rpm"}}},{"category":"product_version","name":"tomcat-webapps","product":{"name":"tomcat-webapps","product_id":"tomcat-webapps","product_identification_helper":{"cpe":"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*","purl":"pkg:rpm/suse/tomcat-webapps@?upstream=tomcat.src.rpm"}}},{"category":"product_version","name":"tomcat6","product":{"name":"tomcat6","product_id":"tomcat6","product_identification_helper":{"cpe":"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*","purl":"pkg:rpm/suse/tomcat6@?upstream=tomcat6.src.rpm"}}},{"category":"product_version","name":"tomcat6-admin-webapps","product":{"name":"tomcat6-admin-webapps","product_id":"tomcat6-admin-webapps","product_identification_helper":{"cpe":"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*","purl":"pkg:rpm/suse/tomcat6-admin-webapps@?upstream=tomcat6.src.rpm"}}},{"category":"product_version","name":"tomcat6-docs-webapp","product":{"name":"tomcat6-docs-webapp","product_id":"tomcat6-docs-webapp","product_identification_helper":{"cpe":"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*","purl":"pkg:rpm/suse/tomcat6-docs-webapp@?upstream=tomcat6.src.rpm"}}},{"category":"product_version","name":"tomcat6-javadoc","product":{"name":"tomcat6-javadoc","product_id":"tomcat6-javadoc","product_identification_helper":{"cpe":"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*","purl":"pkg:rpm/suse/tomcat6-javadoc@?upstream=tomcat6.src.rpm"}}},{"category":"product_version","name":"tomcat6-jsp-2_1-api","product":{"name":"tomcat6-jsp-2_1-api","product_id":"tomcat6-jsp-2_1-api","product_identification_helper":{"cpe":"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*","purl":"pkg:rpm/suse/tomcat6-jsp-2_1-api@?upstream=tomcat6.src.rpm"}}},{"category":"product_version","name":"tomcat6-lib","product":{"name":"tomcat6-lib","product_id":"tomcat6-lib","product_identification_helper":{"cpe":"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*","purl":"pkg:rpm/suse/tomcat6-lib@?upstream=tomcat6.src.rpm"}}},{"category":"product_version","name":"tomcat6-servlet-2_5-api","product":{"name":"tomcat6-servlet-2_5-api","product_id":"tomcat6-servlet-2_5-api","product_identification_helper":{"cpe":"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*","purl":"pkg:rpm/suse/tomcat6-servlet-2_5-api@?upstream=tomcat6.src.rpm"}}},{"category":"product_version","name":"tomcat6-webapps","product":{"name":"tomcat6-webapps","product_id":"tomcat6-webapps","product_identification_helper":{"cpe":"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*","purl":"pkg:rpm/suse/tomcat6-webapps@?upstream=tomcat6.src.rpm"}}}],"category":"product_family","name":"SUSE Linux Enterprise"}],"category":"vendor","name":"SUSE"}],"relationships":[{"category":"default_component_of","full_product_name":{"name":"tomcat6 as component of SUSE Linux Enterprise Server 11 SP1 for Teradata","product_id":"SUSE Linux Enterprise Server 11 SP1 for Teradata:tomcat6"},"product_reference":"tomcat6","relates_to_product_reference":"SUSE Linux Enterprise Server 11 SP1 for Teradata"},{"category":"default_component_of","full_product_name":{"name":"tomcat6 as component of SUSE Linux Enterprise Server 11 SP3 for Teradata","product_id":"SUSE Linux Enterprise Server 11 SP3 for Teradata:tomcat6"},"product_reference":"tomcat6","relates_to_product_reference":"SUSE Linux Enterprise Server 11 SP3 for Teradata"},{"category":"default_component_of","full_product_name":{"name":"tomcat6 as component of SUSE Linux Enterprise Server 11 SP4","product_id":"SUSE Linux Enterprise Server 11 SP4:tomcat6"},"product_reference":"tomcat6","relates_to_product_reference":"SUSE Linux Enterprise Server 11 SP4"},{"category":"default_component_of","full_product_name":{"name":"tomcat6-admin-webapps as component of SUSE Linux Enterprise Server 11 SP4","product_id":"SUSE Linux Enterprise Server 11 SP4:tomcat6-admin-webapps"},"product_reference":"tomcat6-admin-webapps","relates_to_product_reference":"SUSE Linux Enterprise Server 11 SP4"},{"category":"default_component_of","full_product_name":{"name":"tomcat6-docs-webapp as component of SUSE Linux Enterprise Server 11 SP4","product_id":"SUSE Linux Enterprise Server 11 SP4:tomcat6-docs-webapp"},"product_reference":"tomcat6-docs-webapp","relates_to_product_reference":"SUSE Linux Enterprise Server 11 SP4"},{"category":"default_component_of","full_product_name":{"name":"tomcat6-javadoc as component of SUSE Linux Enterprise Server 11 SP4","product_id":"SUSE Linux Enterprise Server 11 SP4:tomcat6-javadoc"},"product_reference":"tomcat6-javadoc","relates_to_product_reference":"SUSE Linux Enterprise Server 11 SP4"},{"category":"default_component_of","full_product_name":{"name":"tomcat6-jsp-2_1-api as component of SUSE Linux Enterprise Server 11 SP4","product_id":"SUSE Linux Enterprise Server 11 SP4:tomcat6-jsp-2_1-api"},"product_reference":"tomcat6-jsp-2_1-api","relates_to_product_reference":"SUSE Linux Enterprise Server 11 SP4"},{"category":"default_component_of","full_product_name":{"name":"tomcat6-lib as component of SUSE Linux Enterprise Server 11 SP4","product_id":"SUSE Linux Enterprise Server 11 SP4:tomcat6-lib"},"product_reference":"tomcat6-lib","relates_to_product_reference":"SUSE Linux Enterprise Server 11 SP4"},{"category":"default_component_of","full_product_name":{"name":"tomcat6-servlet-2_5-api as component of SUSE Linux Enterprise Server 11 SP4","product_id":"SUSE Linux Enterprise Server 11 SP4:tomcat6-servlet-2_5-api"},"product_reference":"tomcat6-servlet-2_5-api","relates_to_product_reference":"SUSE Linux Enterprise Server 11 SP4"},{"category":"default_component_of","full_product_name":{"name":"tomcat6-webapps as component of SUSE Linux Enterprise Server 11 SP4","product_id":"SUSE Linux Enterprise Server 11 SP4:tomcat6-webapps"},"product_reference":"tomcat6-webapps","relates_to_product_reference":"SUSE Linux Enterprise Server 11 SP4"},{"category":"default_component_of","full_product_name":{"name":"tomcat6 as component of SUSE Linux Enterprise Server 11 SP4-LTSS","product_id":"SUSE Linux Enterprise Server 11 SP4-LTSS:tomcat6"},"product_reference":"tomcat6","relates_to_product_reference":"SUSE Linux Enterprise Server 11 SP4-LTSS"},{"category":"default_component_of","full_product_name":{"name":"tomcat6-admin-webapps as component of SUSE Linux Enterprise Server 11 SP4-LTSS","product_id":"SUSE Linux Enterprise Server 11 SP4-LTSS:tomcat6-admin-webapps"},"product_reference":"tomcat6-admin-webapps","relates_to_product_reference":"SUSE Linux Enterprise Server 11 SP4-LTSS"},{"category":"default_component_of","full_product_name":{"name":"tomcat6-docs-webapp as component of SUSE Linux Enterprise Server 11 SP4-LTSS","product_id":"SUSE Linux Enterprise Server 11 SP4-LTSS:tomcat6-docs-webapp"},"product_reference":"tomcat6-docs-webapp","relates_to_product_reference":"SUSE Linux Enterprise Server 11 SP4-LTSS"},{"category":"default_component_of","full_product_name":{"name":"tomcat6-javadoc as component of SUSE Linux Enterprise Server 11 SP4-LTSS","product_id":"SUSE Linux Enterprise Server 11 SP4-LTSS:tomcat6-javadoc"},"product_reference":"tomcat6-javadoc","relates_to_product_reference":"SUSE Linux Enterprise Server 11 SP4-LTSS"},{"category":"default_component_of","full_product_name":{"name":"tomcat6-jsp-2_1-api as component of SUSE Linux Enterprise Server 11 SP4-LTSS","product_id":"SUSE Linux Enterprise Server 11 SP4-LTSS:tomcat6-jsp-2_1-api"},"product_reference":"tomcat6-jsp-2_1-api","relates_to_product_reference":"SUSE Linux Enterprise Server 11 SP4-LTSS"},{"category":"default_component_of","full_product_name":{"name":"tomcat6-lib as component of SUSE Linux Enterprise Server 11 SP4-LTSS","product_id":"SUSE Linux Enterprise Server 11 SP4-LTSS:tomcat6-lib"},"product_reference":"tomcat6-lib","relates_to_product_reference":"SUSE Linux Enterprise Server 11 SP4-LTSS"},{"category":"default_component_of","full_product_name":{"name":"tomcat6-servlet-2_5-api as component of SUSE Linux Enterprise Server 11 SP4-LTSS","product_id":"SUSE Linux Enterprise Server 11 SP4-LTSS:tomcat6-servlet-2_5-api"},"product_reference":"tomcat6-servlet-2_5-api","relates_to_product_reference":"SUSE Linux Enterprise Server 11 SP4-LTSS"},{"category":"default_component_of","full_product_name":{"name":"tomcat6-webapps as component of SUSE Linux Enterprise Server 11 SP4-LTSS","product_id":"SUSE Linux Enterprise Server 11 SP4-LTSS:tomcat6-webapps"},"product_reference":"tomcat6-webapps","relates_to_product_reference":"SUSE Linux Enterprise Server 11 SP4-LTSS"},{"category":"default_component_of","full_product_name":{"name":"tomcat as component of SUSE Linux Enterprise High Performance Computing 12 SP1","product_id":"SUSE Linux Enterprise High Performance Computing 12 SP1:tomcat"},"product_reference":"tomcat","relates_to_product_reference":"SUSE Linux Enterprise High Performance Computing 12 SP1"},{"category":"default_component_of","full_product_name":{"name":"tomcat-admin-webapps as component of SUSE Linux Enterprise High Performance Computing 12 SP1","product_id":"SUSE Linux Enterprise High Performance Computing 12 SP1:tomcat-admin-webapps"},"product_reference":"tomcat-admin-webapps","relates_to_product_reference":"SUSE Linux Enterprise High Performance Computing 12 SP1"},{"category":"default_component_of","full_product_name":{"name":"tomcat-docs-webapp as component of SUSE Linux Enterprise High Performance Computing 12 SP1","product_id":"SUSE Linux Enterprise High Performance Computing 12 SP1:tomcat-docs-webapp"},"product_reference":"tomcat-docs-webapp","relates_to_product_reference":"SUSE Linux Enterprise High Performance Computing 12 SP1"},{"category":"default_component_of","full_product_name":{"name":"tomcat-el-3_0-api as component of SUSE Linux Enterprise High Performance Computing 12 SP1","product_id":"SUSE Linux Enterprise High Performance Computing 12 SP1:tomcat-el-3_0-api"},"product_reference":"tomcat-el-3_0-api","relates_to_product_reference":"SUSE Linux Enterprise High Performance Computing 12 SP1"},{"category":"default_component_of","full_product_name":{"name":"tomcat-javadoc as component of SUSE Linux Enterprise High Performance Computing 12 SP1","product_id":"SUSE Linux Enterprise High Performance Computing 12 SP1:tomcat-javadoc"},"product_reference":"tomcat-javadoc","relates_to_product_reference":"SUSE Linux Enterprise High Performance Computing 12 SP1"},{"category":"default_component_of","full_product_name":{"name":"tomcat-jsp-2_3-api as component of SUSE Linux Enterprise High Performance Computing 12 SP1","product_id":"SUSE Linux Enterprise High Performance Computing 12 SP1:tomcat-jsp-2_3-api"},"product_reference":"tomcat-jsp-2_3-api","relates_to_product_reference":"SUSE Linux Enterprise High Performance Computing 12 SP1"},{"category":"default_component_of","full_product_name":{"name":"tomcat-lib as component of SUSE Linux Enterprise High Performance Computing 12 SP1","product_id":"SUSE Linux Enterprise High Performance Computing 12 SP1:tomcat-lib"},"product_reference":"tomcat-lib","relates_to_product_reference":"SUSE Linux Enterprise High Performance Computing 12 SP1"},{"category":"default_component_of","full_product_name":{"name":"tomcat-servlet-3_1-api as component of SUSE Linux Enterprise High Performance Computing 12 SP1","product_id":"SUSE Linux Enterprise High Performance Computing 12 SP1:tomcat-servlet-3_1-api"},"product_reference":"tomcat-servlet-3_1-api","relates_to_product_reference":"SUSE Linux Enterprise High Performance Computing 12 SP1"},{"category":"default_component_of","full_product_name":{"name":"tomcat-webapps as component of SUSE Linux Enterprise High Performance Computing 12 SP1","product_id":"SUSE Linux Enterprise High Performance Computing 12 SP1:tomcat-webapps"},"product_reference":"tomcat-webapps","relates_to_product_reference":"SUSE Linux Enterprise High Performance Computing 12 SP1"},{"category":"default_component_of","full_product_name":{"name":"tomcat as component of SUSE Linux Enterprise Server 12 SP1","product_id":"SUSE Linux Enterprise Server 12 SP1:tomcat"},"product_reference":"tomcat","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP1"},{"category":"default_component_of","full_product_name":{"name":"tomcat-admin-webapps as component of SUSE Linux Enterprise Server 12 SP1","product_id":"SUSE Linux Enterprise Server 12 SP1:tomcat-admin-webapps"},"product_reference":"tomcat-admin-webapps","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP1"},{"category":"default_component_of","full_product_name":{"name":"tomcat-docs-webapp as component of SUSE Linux Enterprise Server 12 SP1","product_id":"SUSE Linux Enterprise Server 12 SP1:tomcat-docs-webapp"},"product_reference":"tomcat-docs-webapp","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP1"},{"category":"default_component_of","full_product_name":{"name":"tomcat-el-3_0-api as component of SUSE Linux Enterprise Server 12 SP1","product_id":"SUSE Linux Enterprise Server 12 SP1:tomcat-el-3_0-api"},"product_reference":"tomcat-el-3_0-api","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP1"},{"category":"default_component_of","full_product_name":{"name":"tomcat-javadoc as component of SUSE Linux Enterprise Server 12 SP1","product_id":"SUSE Linux Enterprise Server 12 SP1:tomcat-javadoc"},"product_reference":"tomcat-javadoc","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP1"},{"category":"default_component_of","full_product_name":{"name":"tomcat-jsp-2_3-api as component of SUSE Linux Enterprise Server 12 SP1","product_id":"SUSE Linux Enterprise Server 12 SP1:tomcat-jsp-2_3-api"},"product_reference":"tomcat-jsp-2_3-api","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP1"},{"category":"default_component_of","full_product_name":{"name":"tomcat-lib as component of SUSE Linux Enterprise Server 12 SP1","product_id":"SUSE Linux Enterprise Server 12 SP1:tomcat-lib"},"product_reference":"tomcat-lib","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP1"},{"category":"default_component_of","full_product_name":{"name":"tomcat-servlet-3_1-api as component of SUSE Linux Enterprise Server 12 SP1","product_id":"SUSE Linux Enterprise Server 12 SP1:tomcat-servlet-3_1-api"},"product_reference":"tomcat-servlet-3_1-api","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP1"},{"category":"default_component_of","full_product_name":{"name":"tomcat-webapps as component of SUSE Linux Enterprise Server 12 SP1","product_id":"SUSE Linux Enterprise Server 12 SP1:tomcat-webapps"},"product_reference":"tomcat-webapps","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP1"},{"category":"default_component_of","full_product_name":{"name":"tomcat as component of SUSE Linux Enterprise High Performance Computing 12 SP2","product_id":"SUSE Linux Enterprise High Performance Computing 12 SP2:tomcat"},"product_reference":"tomcat","relates_to_product_reference":"SUSE Linux Enterprise High Performance Computing 12 SP2"},{"category":"default_component_of","full_product_name":{"name":"tomcat-admin-webapps as component of SUSE Linux Enterprise High Performance Computing 12 SP2","product_id":"SUSE Linux Enterprise High Performance Computing 12 SP2:tomcat-admin-webapps"},"product_reference":"tomcat-admin-webapps","relates_to_product_reference":"SUSE Linux Enterprise High Performance Computing 12 SP2"},{"category":"default_component_of","full_product_name":{"name":"tomcat-docs-webapp as component of SUSE Linux Enterprise High Performance Computing 12 SP2","product_id":"SUSE Linux Enterprise High Performance Computing 12 SP2:tomcat-docs-webapp"},"product_reference":"tomcat-docs-webapp","relates_to_product_reference":"SUSE Linux Enterprise High Performance Computing 12 SP2"},{"category":"default_component_of","full_product_name":{"name":"tomcat-el-3_0-api as component of SUSE Linux Enterprise High Performance Computing 12 SP2","product_id":"SUSE Linux Enterprise High Performance Computing 12 SP2:tomcat-el-3_0-api"},"product_reference":"tomcat-el-3_0-api","relates_to_product_reference":"SUSE Linux Enterprise High Performance Computing 12 SP2"},{"category":"default_component_of","full_product_name":{"name":"tomcat-javadoc as component of SUSE Linux Enterprise High Performance Computing 12 SP2","product_id":"SUSE Linux Enterprise High Performance Computing 12 SP2:tomcat-javadoc"},"product_reference":"tomcat-javadoc","relates_to_product_reference":"SUSE Linux Enterprise High Performance Computing 12 SP2"},{"category":"default_component_of","full_product_name":{"name":"tomcat-jsp-2_3-api as component of SUSE Linux Enterprise High Performance Computing 12 SP2","product_id":"SUSE Linux Enterprise High Performance Computing 12 SP2:tomcat-jsp-2_3-api"},"product_reference":"tomcat-jsp-2_3-api","relates_to_product_reference":"SUSE Linux Enterprise High Performance Computing 12 SP2"},{"category":"default_component_of","full_product_name":{"name":"tomcat-lib as component of SUSE Linux Enterprise High Performance Computing 12 SP2","product_id":"SUSE Linux Enterprise High Performance Computing 12 SP2:tomcat-lib"},"product_reference":"tomcat-lib","relates_to_product_reference":"SUSE Linux Enterprise High Performance Computing 12 SP2"},{"category":"default_component_of","full_product_name":{"name":"tomcat-servlet-3_1-api as component of SUSE Linux Enterprise High Performance Computing 12 SP2","product_id":"SUSE Linux Enterprise High Performance Computing 12 SP2:tomcat-servlet-3_1-api"},"product_reference":"tomcat-servlet-3_1-api","relates_to_product_reference":"SUSE Linux Enterprise High Performance Computing 12 SP2"},{"category":"default_component_of","full_product_name":{"name":"tomcat-webapps as component of SUSE Linux Enterprise High Performance Computing 12 SP2","product_id":"SUSE Linux Enterprise High Performance Computing 12 SP2:tomcat-webapps"},"product_reference":"tomcat-webapps","relates_to_product_reference":"SUSE Linux Enterprise High Performance Computing 12 SP2"},{"category":"default_component_of","full_product_name":{"name":"tomcat as component of SUSE Linux Enterprise Server 12 SP2","product_id":"SUSE Linux Enterprise Server 12 SP2:tomcat"},"product_reference":"tomcat","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP2"},{"category":"default_component_of","full_product_name":{"name":"tomcat-admin-webapps as component of SUSE Linux Enterprise Server 12 SP2","product_id":"SUSE Linux Enterprise Server 12 SP2:tomcat-admin-webapps"},"product_reference":"tomcat-admin-webapps","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP2"},{"category":"default_component_of","full_product_name":{"name":"tomcat-docs-webapp as component of SUSE Linux Enterprise Server 12 SP2","product_id":"SUSE Linux Enterprise Server 12 SP2:tomcat-docs-webapp"},"product_reference":"tomcat-docs-webapp","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP2"},{"category":"default_component_of","full_product_name":{"name":"tomcat-el-3_0-api as component of SUSE Linux Enterprise Server 12 SP2","product_id":"SUSE Linux Enterprise Server 12 SP2:tomcat-el-3_0-api"},"product_reference":"tomcat-el-3_0-api","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP2"},{"category":"default_component_of","full_product_name":{"name":"tomcat-javadoc as component of SUSE Linux Enterprise Server 12 SP2","product_id":"SUSE Linux Enterprise Server 12 SP2:tomcat-javadoc"},"product_reference":"tomcat-javadoc","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP2"},{"category":"default_component_of","full_product_name":{"name":"tomcat-jsp-2_3-api as component of SUSE Linux Enterprise Server 12 SP2","product_id":"SUSE Linux Enterprise Server 12 SP2:tomcat-jsp-2_3-api"},"product_reference":"tomcat-jsp-2_3-api","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP2"},{"category":"default_component_of","full_product_name":{"name":"tomcat-lib as component of SUSE Linux Enterprise Server 12 SP2","product_id":"SUSE Linux Enterprise Server 12 SP2:tomcat-lib"},"product_reference":"tomcat-lib","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP2"},{"category":"default_component_of","full_product_name":{"name":"tomcat-servlet-3_1-api as component of SUSE Linux Enterprise Server 12 SP2","product_id":"SUSE Linux Enterprise Server 12 SP2:tomcat-servlet-3_1-api"},"product_reference":"tomcat-servlet-3_1-api","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP2"},{"category":"default_component_of","full_product_name":{"name":"tomcat-webapps as component of SUSE Linux Enterprise Server 12 SP2","product_id":"SUSE Linux Enterprise Server 12 SP2:tomcat-webapps"},"product_reference":"tomcat-webapps","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP2"}]},"vulnerabilities":[{"cve":"CVE-2017-6056","ids":[{"system_name":"SUSE CVE Page","text":"https://www.suse.com/security/cve/CVE-2017-6056"}],"notes":[{"category":"general","text":"It was discovered that a programming error in the processing of HTTPS requests in the Apache Tomcat servlet and JSP engine may result in denial of service via an infinite loop. The denial of service is easily achievable as a consequence of backporting a CVE-2016-6816 fix but not backporting the fix for Tomcat bug 57544. Distributions affected by this backporting issue include Debian (before 7.0.56-3+deb8u8 and 8.0.14-1+deb8u7 in jessie) and Ubuntu.","title":"CVE description"}],"product_status":{"known_not_affected":["SUSE Linux Enterprise High Performance Computing 12 SP1:tomcat","SUSE Linux Enterprise High Performance Computing 12 SP1:tomcat-admin-webapps","SUSE Linux Enterprise High Performance Computing 12 SP1:tomcat-docs-webapp","SUSE Linux Enterprise High Performance Computing 12 SP1:tomcat-el-3_0-api","SUSE Linux Enterprise High Performance Computing 12 SP1:tomcat-javadoc","SUSE Linux Enterprise High Performance Computing 12 SP1:tomcat-jsp-2_3-api","SUSE Linux Enterprise High Performance Computing 12 SP1:tomcat-lib","SUSE Linux Enterprise High Performance Computing 12 SP1:tomcat-servlet-3_1-api","SUSE Linux Enterprise High Performance Computing 12 SP1:tomcat-webapps","SUSE Linux Enterprise High Performance Computing 12 SP2:tomcat","SUSE Linux Enterprise High Performance Computing 12 SP2:tomcat-admin-webapps","SUSE Linux Enterprise High Performance Computing 12 SP2:tomcat-docs-webapp","SUSE Linux Enterprise High Performance Computing 12 SP2:tomcat-el-3_0-api","SUSE Linux Enterprise High Performance Computing 12 SP2:tomcat-javadoc","SUSE Linux Enterprise High Performance Computing 12 SP2:tomcat-jsp-2_3-api","SUSE Linux Enterprise High Performance Computing 12 SP2:tomcat-lib","SUSE Linux Enterprise High Performance Computing 12 SP2:tomcat-servlet-3_1-api","SUSE Linux Enterprise High Performance Computing 12 SP2:tomcat-webapps","SUSE Linux Enterprise Server 11 SP1 for Teradata:tomcat6","SUSE Linux Enterprise Server 11 SP3 for Teradata:tomcat6","SUSE Linux Enterprise Server 11 SP4-LTSS:tomcat6","SUSE Linux Enterprise Server 11 SP4-LTSS:tomcat6-admin-webapps","SUSE Linux Enterprise Server 11 SP4-LTSS:tomcat6-docs-webapp","SUSE Linux Enterprise Server 11 SP4-LTSS:tomcat6-javadoc","SUSE Linux Enterprise Server 11 SP4-LTSS:tomcat6-jsp-2_1-api","SUSE Linux Enterprise Server 11 SP4-LTSS:tomcat6-lib","SUSE Linux Enterprise Server 11 SP4-LTSS:tomcat6-servlet-2_5-api","SUSE Linux Enterprise Server 11 SP4-LTSS:tomcat6-webapps","SUSE Linux Enterprise Server 11 SP4:tomcat6","SUSE Linux Enterprise Server 11 SP4:tomcat6-admin-webapps","SUSE Linux Enterprise Server 11 SP4:tomcat6-docs-webapp","SUSE Linux Enterprise Server 11 SP4:tomcat6-javadoc","SUSE Linux Enterprise Server 11 SP4:tomcat6-jsp-2_1-api","SUSE Linux Enterprise Server 11 SP4:tomcat6-lib","SUSE Linux Enterprise Server 11 SP4:tomcat6-servlet-2_5-api","SUSE Linux Enterprise Server 11 SP4:tomcat6-webapps","SUSE Linux Enterprise Server 12 SP1:tomcat","SUSE Linux Enterprise Server 12 SP1:tomcat-admin-webapps","SUSE Linux Enterprise Server 12 SP1:tomcat-docs-webapp","SUSE Linux Enterprise Server 12 SP1:tomcat-el-3_0-api","SUSE Linux Enterprise Server 12 SP1:tomcat-javadoc","SUSE Linux Enterprise Server 12 SP1:tomcat-jsp-2_3-api","SUSE Linux Enterprise Server 12 SP1:tomcat-lib","SUSE Linux Enterprise Server 12 SP1:tomcat-servlet-3_1-api","SUSE Linux Enterprise Server 12 SP1:tomcat-webapps","SUSE Linux Enterprise Server 12 SP2:tomcat","SUSE Linux Enterprise Server 12 SP2:tomcat-admin-webapps","SUSE Linux Enterprise Server 12 SP2:tomcat-docs-webapp","SUSE Linux Enterprise Server 12 SP2:tomcat-el-3_0-api","SUSE Linux Enterprise Server 12 SP2:tomcat-javadoc","SUSE Linux Enterprise Server 12 SP2:tomcat-jsp-2_3-api","SUSE Linux Enterprise Server 12 SP2:tomcat-lib","SUSE Linux Enterprise Server 12 SP2:tomcat-servlet-3_1-api","SUSE Linux Enterprise Server 12 SP2:tomcat-webapps"]},"references":[{"category":"external","summary":"CVE-2017-6056","url":"https://www.suse.com/security/cve/CVE-2017-6056"},{"category":"external","summary":"SUSE Security Ratings","url":"https://www.suse.com/support/security/rating/"},{"category":"external","summary":"SUSE Bug 1025205 for CVE-2017-6056","url":"https://bugzilla.suse.com/1025205"}],"threats":[{"category":"impact","date":"2017-02-14T06:16:33Z","details":"moderate"}],"title":"CVE-2017-6056"}]} |