MGASA-2013-0191

Advisory lineage Upstream: 1 Downstream: 0
Upstream
CVE-2013-2071
Published: 01 Jul 2013, 19:08
Last modified:16 Apr 2026, 06:23

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

01 Jul 2013, 19:08
Published
Vulnerability first disclosed
16 Apr 2026, 06:23
Last Modified
Vulnerability information updated

Description

Updated tomcat7 packages fix CVE-2013-2071 java/org/apache/catalina/core/AsyncContextImpl.java in Apache Tomcat 7.x before 7.0.40 does not properly handle the throwing of a RuntimeException in an AsyncListener in an application, which allows context-dependent attackers to obtain sensitive request information intended for other applications in opportunistic circumstances via an application that records the requests that it processes (CVE-2013-2071).

Affected Systems

  • mageia•tomcat

    < 7.0.41-3.mga2

  • mageia•tomcat

    < 7.0.41-4.mga3

References (4)