Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.tomcat/tomcat-util@8.0.36
purl pkg:maven/org.apache.tomcat/tomcat-util@8.0.36
Next non-vulnerable version 8.0.52
Latest non-vulnerable version 11.0.25
Risk score 3.4
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
CVE-2018-1336

An improper handing of overflow in the UTF-8 decoder with supplementary characters can lead to an infinite loop in the …
8.5.31
Vulnerable
8.5.32
Vulnerable
8.5.34
Vulnerable
8.5.35
Vulnerable
8.5.37
Vulnerable
8.5.38
Vulnerable
8.5.39
Vulnerable
8.5.40
Vulnerable
8.5.41
Vulnerable
8.5.42
Vulnerable
8.5.43
Vulnerable
8.5.45
Vulnerable
8.5.46
Vulnerable
8.5.47
Vulnerable
8.5.50
Vulnerable
8.5.51
Vulnerable
9.0.8
Vulnerable
9.0.10
Vulnerable
9.0.16
Vulnerable
9.0.19
Vulnerable
9.0.20
Vulnerable
9.0.21
Vulnerable
9.0.22
Vulnerable
9.0.24
Vulnerable
9.0.26
Vulnerable
9.0.27
Vulnerable
9.0.29
Vulnerable
9.0.30
Vulnerable
9.0.31
Vulnerable
9.0.36
Vulnerable
8.5.53
Vulnerable
8.5.54
Vulnerable
8.5.55
Vulnerable
8.5.56
Vulnerable
8.5.57
Vulnerable
9.0.33
Vulnerable
9.0.34
Vulnerable
9.0.35
Vulnerable
9.0.37
Vulnerable
CVE-2018-1336

An improper handing of overflow in the UTF-8 decoder with supplementary characters can lead to an infinite loop in the …
8.5.31
Vulnerable
9.0.8
Vulnerable
7.0.88
Vulnerable
8.0.52
Not vulnerable
GHSA-w3j5-q8f2-3cqq
Aliases:
CVE-2016-8745
Concurrent Execution using Shared Resource with Improper Synchronization in Apache Tomcat A bug in the error handling of the send …
8.5.9
Vulnerable
8.0.41
Vulnerable
8.5.9
Vulnerable
8.0.41
Vulnerable
8.0.41
Vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
CVE-2020-1938
When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats …