CVE-2018-1336: apache software foundation apache tomcat Loop with Unreachable Exit Condition

Modified

AliasesRHEA-2018:2188RHEA-2018:2189RHSA-2018:2701+3 more

Published 02-08-2018Last modified 14-11-2024

Vulnerability summary

CVE-2018-1336 is a high (CVSS 7.5) Loop with Unreachable Exit Condition vulnerability in apache software foundation apache tomcat. EPSS estimates a 20.35% chance of exploitation in the next 30 days, higher than 97.4% of scored vulnerabilities.

Priority

Prioritisesevere

Severe, CVSS 7.5 (NVD); no exploitation reported by the 5 checked sources; EPSS 20% (FIRST, 03-11-2026)

Source freshness unavailable

How is this decided?

CVSS score

7.5/10

010

High · v3.1 (NVD)

EPSS score

20.35%

0%100%

High · -0.25 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 14 · Related 8

DLA-1491-1 DSA-4281-1 MGASA-2018-0479 OPENSUSE-SU-2024:11468-1 OPENSUSE-SU-2024:13441-1 RHSA-2018:2741+8 more

Timeline

02-08-2018
PublishedVulnerability first disclosed.
14-11-2024
Last modifiedVulnerability information updated.

Description

An improper handing of overflow in the UTF-8 decoder with supplementary characters can lead to an infinite loop in the decoder causing a Denial of Service. Versions Affected: Apache Tomcat 9.0.0.M9 to 9.0.7, 8.5.0 to 8.5.30, 8.0.0.RC1 to 8.0.51, and 7.0.28 to 7.0.86.

CVSS metrics

5 scores · 4 sources · 3 versions

v3.17.5v3.07.5v2.05.0

EPSS trend

Probability

20.35%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

Decrease -0.25 pp

From 20.60% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-835Loop with Unreachable Exit ConditionThe product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

Affected systems

Version check

Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.

Redhat62 products

enterprise_linux_desktop7.0
enterprise_linux_server7.0
enterprise_linux_workstation7.0
jboss_enterprise_application_platform6.0.0 | 6.4.0
jboss_enterprise_web_server3.0.0 | 5.0.0

jws5< 0:1-5.el7jws | < 0:1-5.el6jws
jws5-ecj< 0:4.6.1-5.redhat_1.1.el7jws | < 0:4.6.1-5.redhat_1.1.el6jws
jws5-javapackages-tools< 0:3.4.1-5.15.7.el7jws | < 0:3.4.1-5.15.7.el6jws
jws5-jboss-logging< 0:3.3.1-4.Final_redhat_1.1.el7jws | < 0:3.3.1-4.Final_redhat_1.1.el6jws
jws5-mod_cluster< 0:1.4.0-8.Final_redhat_1.1.el7jws | < 0:1.4.0-8.Final_redhat_1.1.el6jws
jws5-mod_cluster-tomcat< 0:1.4.0-8.Final_redhat_1.1.el7jws | < 0:1.4.0-8.Final_redhat_1.1.el6jws
jws5-python-javapackages< 0:3.4.1-5.15.7.el7jws | < 0:3.4.1-5.15.7.el6jws
jws5-runtime< 0:1-5.el7jws | < 0:1-5.el6jws
jws5-tomcat< 0:9.0.7-10.redhat_10.1.el7jws | < 0:9.0.7-10.redhat_10.1.el6jws
jws5-tomcat-admin-webapps< 0:9.0.7-10.redhat_10.1.el7jws | < 0:9.0.7-10.redhat_10.1.el6jws
jws5-tomcat-docs-webapp< 0:9.0.7-10.redhat_10.1.el7jws | < 0:9.0.7-10.redhat_10.1.el6jws
jws5-tomcat-el-3.0-api< 0:9.0.7-10.redhat_10.1.el7jws | < 0:9.0.7-10.redhat_10.1.el6jws
jws5-tomcat-javadoc< 0:9.0.7-10.redhat_10.1.el7jws | < 0:9.0.7-10.redhat_10.1.el6jws
jws5-tomcat-jsp-2.3-api< 0:9.0.7-10.redhat_10.1.el7jws | < 0:9.0.7-10.redhat_10.1.el6jws
jws5-tomcat-jsvc< 0:9.0.7-10.redhat_10.1.el7jws | < 0:9.0.7-10.redhat_10.1.el6jws
jws5-tomcat-lib< 0:9.0.7-10.redhat_10.1.el7jws | < 0:9.0.7-10.redhat_10.1.el6jws
jws5-tomcat-native< 0:1.2.17-20.redhat_20.el7jws | < 0:1.2.17-20.redhat_20.el6jws
jws5-tomcat-native-debuginfo< 0:1.2.17-20.redhat_20.el7jws | < 0:1.2.17-20.redhat_20.el6jws
jws5-tomcat-selinux< 0:9.0.7-10.redhat_10.1.el7jws | < 0:9.0.7-10.redhat_10.1.el6jws
jws5-tomcat-servlet-4.0-api< 0:9.0.7-10.redhat_10.1.el7jws | < 0:9.0.7-10.redhat_10.1.el6jws
jws5-tomcat-vault< 0:1.1.7-3.Final_redhat_1.1.el7jws | < 0:1.1.7-3.Final_redhat_1.1.el6jws
jws5-tomcat-vault-javadoc< 0:1.1.7-3.Final_redhat_1.1.el7jws | < 0:1.1.7-3.Final_redhat_1.1.el6jws
jws5-tomcat-webapps< 0:9.0.7-10.redhat_10.1.el7jws | < 0:9.0.7-10.redhat_10.1.el6jws
tomcat< 0:7.0.76-8.el7_5
tomcat-admin-webapps< 0:7.0.76-8.el7_5
tomcat-docs-webapp< 0:7.0.76-8.el7_5
tomcat-el-2.2-api< 0:7.0.76-8.el7_5
tomcat-javadoc< 0:7.0.76-8.el7_5
tomcat-jsp-2.2-api< 0:7.0.76-8.el7_5
tomcat-jsvc< 0:7.0.76-8.el7_5
tomcat-lib< 0:7.0.76-8.el7_5
tomcat-servlet-3.0-api< 0:7.0.76-8.el7_5
tomcat-webapps< 0:7.0.76-8.el7_5
tomcat7< 0:7.0.70-29.ep7.el6 | < 0:7.0.70-29.ep7.el7
tomcat7-admin-webapps< 0:7.0.70-29.ep7.el6 | < 0:7.0.70-29.ep7.el7
tomcat7-docs-webapp< 0:7.0.70-29.ep7.el6 | < 0:7.0.70-29.ep7.el7
tomcat7-el-2.2-api< 0:7.0.70-29.ep7.el6 | < 0:7.0.70-29.ep7.el7
tomcat7-javadoc< 0:7.0.70-29.ep7.el6 | < 0:7.0.70-29.ep7.el7
tomcat7-jsp-2.2-api< 0:7.0.70-29.ep7.el6 | < 0:7.0.70-29.ep7.el7
tomcat7-jsvc< 0:7.0.70-29.ep7.el6 | < 0:7.0.70-29.ep7.el7
tomcat7-lib< 0:7.0.70-29.ep7.el6 | < 0:7.0.70-29.ep7.el7
tomcat7-log4j< 0:7.0.70-29.ep7.el6 | < 0:7.0.70-29.ep7.el7
tomcat7-selinux< 0:7.0.70-29.ep7.el6 | < 0:7.0.70-29.ep7.el7
tomcat7-servlet-3.0-api< 0:7.0.70-29.ep7.el6 | < 0:7.0.70-29.ep7.el7
tomcat7-webapps< 0:7.0.70-29.ep7.el6 | < 0:7.0.70-29.ep7.el7
tomcat8< 0:8.0.36-33.ep7.el6 | < 0:8.0.36-33.ep7.el7
tomcat8-admin-webapps< 0:8.0.36-33.ep7.el6 | < 0:8.0.36-33.ep7.el7
tomcat8-docs-webapp< 0:8.0.36-33.ep7.el6 | < 0:8.0.36-33.ep7.el7
tomcat8-el-2.2-api< 0:8.0.36-33.ep7.el6 | < 0:8.0.36-33.ep7.el7
tomcat8-javadoc< 0:8.0.36-33.ep7.el6 | < 0:8.0.36-33.ep7.el7
tomcat8-jsp-2.3-api< 0:8.0.36-33.ep7.el6 | < 0:8.0.36-33.ep7.el7
tomcat8-jsvc< 0:8.0.36-33.ep7.el6 | < 0:8.0.36-33.ep7.el7
tomcat8-lib< 0:8.0.36-33.ep7.el6 | < 0:8.0.36-33.ep7.el7
tomcat8-log4j< 0:8.0.36-33.ep7.el6 | < 0:8.0.36-33.ep7.el7
tomcat8-selinux< 0:8.0.36-33.ep7.el6 | < 0:8.0.36-33.ep7.el7
tomcat8-servlet-3.1-api< 0:8.0.36-33.ep7.el6 | < 0:8.0.36-33.ep7.el7
tomcat8-webapps< 0:8.0.36-33.ep7.el6 | < 0:8.0.36-33.ep7.el7

Show all 62

Ubuntu2 products

tomcat7< 7.0.52-1ubuntu0.15 | < 7.0.68-1ubuntu0.4+esm1
tomcat8< 8.0.32-1ubuntu1.7 | < 8.5.39-1ubuntu1~18.04.1

Apache1 product

tomcatEOL≥ 7.0.28, ≤ 7.0.86 | ≥ 8.0.0, ≤ 8.0.51 | ≥ 8.5.0, ≤ 8.5.30 | ≥ 9.0.1, ≤ 9.0.7 | 8.0.0:rc1 | 8.0.0:rc10 | 8.0.0:rc2 | 8.0.0:rc3 | 8.0.0:rc4 | 8.0.0:rc5 | 8.0.0:rc6 | 8.0.0:rc7 | 8.0.0:rc8 | 8.0.0:rc9 | 9.0.0:milestone10 | 9.0.0:milestone11 | 9.0.0:milestone12 | 9.0.0:milestone13 | 9.0.0:milestone14 | 9.0.0:milestone15 | 9.0.0:milestone16 | 9.0.0:milestone17 | 9.0.0:milestone18 | 9.0.0:milestone19 | 9.0.0:milestone20 | 9.0.0:milestone21 | 9.0.0:milestone22 | 9.0.0:milestone23 | 9.0.0:milestone24 | 9.0.0:milestone25 | 9.0.0:milestone26 | 9.0.0:milestone27 | 9.0.0:milestone9

Apache software foundation1 product

apache tomcat9.0.0.M9 to 9.0.7 | 8.5.0 to 8.5.30 | 8.0.0.RC1 to 8.0.51 | 7.0.28 to 7.0.86

Canonical1 product

ubuntu_linuxEOL14.04 | 16.04

Debian1 product

debian_linuxEOL8.0 | 9.0

Org.apache.tomcat.embed1 product

tomcat-embed-core≥ 9.0.0.M9, < 9.0.8 | ≥ 8.5.0, < 8.5.31 | ≥ 8.0.0RC1, < 8.0.51 | ≥ 7.0.28, < 7.0.87

7 vendors · 69 products

References

78 links

usn.ubuntu.com/3723-1/Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.securityfocus.com/bid/104898VDB EntryX Refsource BIDThird Party Advisory
access.redhat.com/errata/RHSA-2018:2740Vendor AdvisoryX Refsource REDHATThird Party AdvisoryWEB
access.redhat.com/errata/RHSA-2018:2741Vendor AdvisoryX Refsource REDHATThird Party AdvisoryWEB
access.redhat.com/errata/RHSA-2018:2921Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisoryWEB
access.redhat.com/errata/RHSA-2018:2742Vendor AdvisoryX Refsource REDHATThird Party AdvisoryWEB
www.debian.org/security/2018/dsa-4281Vendor AdvisoryX Refsource DEBIANThird Party AdvisoryWEB
access.redhat.com/errata/RHSA-2018:2945Vendor AdvisoryX Refsource REDHATThird Party AdvisoryWEB
access.redhat.com/errata/RHSA-2018:2939Vendor AdvisoryX Refsource REDHATThird Party AdvisoryWEB
access.redhat.com/errata/RHSA-2018:2701Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisoryWEB