USN-5360-1: Tomcat vulnerabilities

Releases

• Ubuntu 20.04 LTS
• Ubuntu 18.04 ESM

Packages

• tomcat9 - Apache Tomcat 9 - Servlet and JSP engine

Details

It was discovered that Tomcat incorrectly performed input verification.
A remote attacker could possibly use this issue to intercept sensitive
information. (CVE-2020-13943, CVE-2020-17527, CVE-2021-25122, CVE-2021-30640)

It was discovered that Tomcat did not properly deserialize untrusted data.
An attacker could possibly use this issue to execute arbitrary code.
(CVE-2020-9484, CVE-2021-33037)

It was discovered that Tomcat did not properly validate the input length. An
attacker could possibly use this to trigger an infinite loop, resulting in a
denial of service. (CVE-2021-25329, CVE-2021-41079)

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 20.04

• tomcat9 - 9.0.31-1ubuntu0.2
• tomcat9-common - 9.0.31-1ubuntu0.2
• libtomcat9-java - 9.0.31-1ubuntu0.2
• libtomcat9-embed-java - 9.0.31-1ubuntu0.2

Ubuntu 18.04

• tomcat9 - 9.0.16-3ubuntu0.18.04.2
• tomcat9-common - 9.0.16-3ubuntu0.18.04.2
• libtomcat9-java - 9.0.16-3ubuntu0.18.04.2
• libtomcat9-embed-java - 9.0.16-3ubuntu0.18.04.2

In general, a standard system update will make all the necessary changes.

References

• CVE-2021-33037
• CVE-2020-17527
• CVE-2020-9484
• CVE-2021-25329
• CVE-2021-25122
• CVE-2021-30640
• CVE-2021-41079
• CVE-2020-13943
• https://bugs.launchpad.net/ubuntu/+source/tomcat9/+bug/1915911

Related notices

• USN-4448-1: tomcat8, libservlet3.1-java-doc, libservlet3.1-java, libtomcat8-java, tomcat8-admin, tomcat8-common, tomcat8-examples, tomcat8-user, tomcat8-docs
• USN-4596-1: libtomcat9-java, tomcat9, tomcat9-docs, tomcat9-admin, libtomcat9-embed-java, tomcat9-user, tomcat9-examples, tomcat9-common
• USN-6908-1: libtomcat7-java, tomcat7-docs, tomcat7, tomcat7-admin, libservlet3.0-java-doc, tomcat7-common, tomcat7-user, tomcat7-examples, libservlet3.0-java
• USN-6943-1: libtomcat9-java, libtomcat8-embed-java, tomcat9, tomcat8, libservlet3.1-java-doc, libservlet3.1-java, tomcat9-docs, libtomcat8-java, tomcat8-admin, tomcat8-common, tomcat8-examples, tomcat9-admin, tomcat8-user, libtomcat9-embed-java, tomcat9-user, tomcat9-examples, tomcat9-common, tomcat8-docs