https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 17:57:43 +0000 https://cve.radiocsirt.org/vuln/cnvd-2018-03753 cnvd-2018-03753 https://cve.radiocsirt.org/vuln/cnvd-2018-03753 https://cve.radiocsirt.org/vuln/euvd-2026-163466 EUVD-2026-163466 https://cve.radiocsirt.org/vuln/euvd-2026-163466 https://cve.radiocsirt.org/vuln/fkie_cve-2017-15698 <p>When parsing the AIA-Extension field of a client certificate, Apache Tomcat Native Connector 1.2.0 to 1.2.14 and 1.1.23 to 1.1.34 did not correctly handle fields longer than 127 bytes. The result of the parsing error was to skip the OCSP check. It was therefore possible for client certificates that should have been rejected (if the OCSP check had been made) to be accepted. Users not using OCSP checks are not affected by this vulnerability.</p> <p>When parsing the AIA-Extension field of a client certificate, Apache Tomcat Native Connector 1.2.0 to 1.2.14 and 1.1.23 to 1.1.34 did not correctly handle fields longer than 127 bytes. The result of the parsing error was to skip the OCSP check. It was therefore possible for client certificates that should have been rejected (if the OCSP check had been made) to be accepted. Users not using OCSP checks are not affected by this vulnerability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-15698 https://cve.radiocsirt.org/vuln/ghsa-ppg5-72hh-9jj4 <p>When parsing the AIA-Extension field of a client certificate, Apache Tomcat Native Connector 1.2.0 to 1.2.14 and 1.1.23 to 1.1.34 did not correctly handle fields longer than 127 bytes. The result of the parsing error was to skip the OCSP check. It was therefore possible for client certificates that should have been rejected (if the OCSP check had been made) to be accepted. Users not using OCSP checks are not affected by this vulnerability.</p> <p>When parsing the AIA-Extension field of a client certificate, Apache Tomcat Native Connector 1.2.0 to 1.2.14 and 1.1.23 to 1.1.34 did not correctly handle fields longer than 127 bytes. The result of the parsing error was to skip the OCSP check. It was therefore possible for client certificates that should have been rejected (if the OCSP check had been made) to be accepted. Users not using OCSP checks are not affected by this vulnerability.</p> https://cve.radiocsirt.org/vuln/ghsa-ppg5-72hh-9jj4 https://cve.radiocsirt.org/vuln/gsd-2017-15698 gsd-2017-15698 https://cve.radiocsirt.org/vuln/gsd-2017-15698 https://cve.radiocsirt.org/vuln/rhsa-2018:0465 <p>apr: Out-of-bounds array deref in apr_time_exp*() functions tomcat: Remote Code Execution via JSP Upload tomcat: Information Disclosure when using VirtualDirContext tomcat: Remote Code Execution bypass for CVE-2017-12615 tomcat-native: Mishandling of client certificates can allow for OCSP check bypass tomcat: Incorrect handling of empty string URL in security constraints can lead to unintended exposure of resources tomcat: Late application of security constraints can lead to resource exposure for unauthorised users</p> <p>apr: Out-of-bounds array deref in apr_time_exp*() functions tomcat: Remote Code Execution via JSP Upload tomcat: Information Disclosure when using VirtualDirContext tomcat: Remote Code Execution bypass for CVE-2017-12615 tomcat-native: Mishandling of client certificates can allow for OCSP check bypass tomcat: Incorrect handling of empty string URL in security constraints can lead to unintended exposure of resources tomcat: Late application of security constraints can lead to resource exposure for unauthorised users</p> https://cve.radiocsirt.org/vuln/rhsa-2018:0465 https://cve.radiocsirt.org/vuln/suse-su-2019:14014-1 <p>Security update for libtcnative-1-0</p> <p>Security update for libtcnative-1-0</p> https://cve.radiocsirt.org/vuln/suse-su-2019:14014-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-15698 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: tomcat-native</p> <p>When parsing the AIA-Extension field of a client certificate, Apache Tomcat Native Connector 1.2.0 to 1.2.14 and 1.1.23 to 1.1.34 did not correctly handle fields longer than 127 bytes. The result of the parsing error was to skip the OCSP check. It was therefore possible for client certificates that should have been rejected (if the OCSP check had been made) to be accepted. Users not using OCSP checks are not affected by this vulnerability.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: tomcat-native</p> <p>When parsing the AIA-Extension field of a client certificate, Apache Tomcat Native Connector 1.2.0 to 1.2.14 and 1.1.23 to 1.1.34 did not correctly handle fields longer than 127 bytes. The result of the parsing error was to skip the OCSP check. It was therefore possible for client certificates that should have been rejected (if the OCSP check had been made) to be accepted. Users not using OCSP checks are not affected by this vulnerability.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-15698