CVE-2016-5388
Fixed in a distro release EPSS 51%
Apache Tomcat 7.x through 7.0.70 and 8.x through 8.5.4, when the CGI Servlet is enabled, follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an "httpoxy" issue. NOTE: the vendor states "A mitigation is planned for future releases of Tomcat, tracked as CVE-2016-5388"; in other words, this is not a CVE ID for a vulnerability.
Products: redhat enterprise_linux_desktop, redhat enterprise_linux_hpc_node, redhat enterprise_linux_hpc_node_eus, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_eus, redhat enterprise_linux_server_tus, redhat enterprise_linux_workstation, hp system_management_homepage, oracle linux, apache tomcat
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Maven | org.apache.tomcat:tomcat-catalina | 7.0.72 |
| Maven | org.apache.tomcat:tomcat-catalina | 8.5.5 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 8 | tomcat8 | 8.0.14-1+deb8u15 |
| Red Hat Enterprise Linux 6 | tomcat6 | 0:6.0.24-98.el6_8 |
| Red Hat Enterprise Linux 6 | tomcat6-admin-webapps | 0:6.0.24-98.el6_8 |
| Red Hat Enterprise Linux 6 | tomcat6-docs-webapp | 0:6.0.24-98.el6_8 |
| Red Hat Enterprise Linux 6 | tomcat6-el-2.1-api | 0:6.0.24-98.el6_8 |
| Red Hat Enterprise Linux 6 | tomcat6-javadoc | 0:6.0.24-98.el6_8 |
| Red Hat Enterprise Linux 6 | tomcat6-jsp-2.1-api | 0:6.0.24-98.el6_8 |
| Red Hat Enterprise Linux 6 | tomcat6-lib | 0:6.0.24-98.el6_8 |
| Red Hat Enterprise Linux 6 | tomcat6-servlet-2.5-api | 0:6.0.24-98.el6_8 |
| Red Hat Enterprise Linux 6 | tomcat6-webapps | 0:6.0.24-98.el6_8 |
| Red Hat Enterprise Linux 7 | tomcat | 0:7.0.54-8.el7_2 |
| Red Hat Enterprise Linux 7 | tomcat-admin-webapps | 0:7.0.54-8.el7_2 |
| Red Hat Enterprise Linux 7 | tomcat-docs-webapp | 0:7.0.54-8.el7_2 |
| Red Hat Enterprise Linux 7 | tomcat-el-2.2-api | 0:7.0.54-8.el7_2 |
| Red Hat Enterprise Linux 7 | tomcat-javadoc | 0:7.0.54-8.el7_2 |
| Red Hat Enterprise Linux 7 | tomcat-jsp-2.2-api | 0:7.0.54-8.el7_2 |
| Red Hat Enterprise Linux 7 | tomcat-jsvc | 0:7.0.54-8.el7_2 |
| Red Hat Enterprise Linux 7 | tomcat-lib | 0:7.0.54-8.el7_2 |
| Red Hat Enterprise Linux 7 | tomcat-servlet-3.0-api | 0:7.0.54-8.el7_2 |
| Red Hat Enterprise Linux 7 | tomcat-webapps | 0:7.0.54-8.el7_2 |
| Red Hat jboss enterprise web server 3.0 | httpd24 | 0:2.4.6-62.ep7.el6 |
| Red Hat jboss enterprise web server 3.0 | httpd24 | 0:2.4.6-62.ep7.el7 |
| Red Hat jboss enterprise web server 3.0 | httpd24-debuginfo | 0:2.4.6-62.ep7.el6 |
| Red Hat jboss enterprise web server 3.0 | httpd24-debuginfo | 0:2.4.6-62.ep7.el7 |
| Red Hat jboss enterprise web server 3.0 | httpd24-devel | 0:2.4.6-62.ep7.el7 |
| Red Hat jboss enterprise web server 3.0 | httpd24-devel | 0:2.4.6-62.ep7.el6 |
| Red Hat jboss enterprise web server 3.0 | httpd24-manual | 0:2.4.6-62.ep7.el6 |
| Red Hat jboss enterprise web server 3.0 | httpd24-manual | 0:2.4.6-62.ep7.el7 |
| Red Hat jboss enterprise web server 3.0 | httpd24-tools | 0:2.4.6-62.ep7.el7 |
| Red Hat jboss enterprise web server 3.0 | httpd24-tools | 0:2.4.6-62.ep7.el6 |
| Red Hat jboss enterprise web server 3.0 | mod_ldap24 | 0:2.4.6-62.ep7.el7 |
| Red Hat jboss enterprise web server 3.0 | mod_ldap24 | 0:2.4.6-62.ep7.el6 |
| Red Hat jboss enterprise web server 3.0 | mod_proxy24_html | 1:2.4.6-62.ep7.el7 |
| Red Hat jboss enterprise web server 3.0 | mod_proxy24_html | 1:2.4.6-62.ep7.el6 |
| Red Hat jboss enterprise web server 3.0 | mod_session24 | 0:2.4.6-62.ep7.el7 |
| Red Hat jboss enterprise web server 3.0 | mod_session24 | 0:2.4.6-62.ep7.el6 |
| Red Hat jboss enterprise web server 3.0 | mod_ssl24 | 1:2.4.6-62.ep7.el7 |
| Red Hat jboss enterprise web server 3.0 | mod_ssl24 | 1:2.4.6-62.ep7.el6 |
| Red Hat jboss enterprise web server 3.0 | tomcat7 | 0:7.0.59-51_patch_01.ep7.el6 |
| Red Hat jboss enterprise web server 3.0 | tomcat7 | 0:7.0.59-51_patch_01.ep7.el7 |
| Red Hat jboss enterprise web server 3.0 | tomcat7-admin-webapps | 0:7.0.59-51_patch_01.ep7.el6 |
| Red Hat jboss enterprise web server 3.0 | tomcat7-admin-webapps | 0:7.0.59-51_patch_01.ep7.el7 |
| Red Hat jboss enterprise web server 3.0 | tomcat7-docs-webapp | 0:7.0.59-51_patch_01.ep7.el7 |
| Red Hat jboss enterprise web server 3.0 | tomcat7-docs-webapp | 0:7.0.59-51_patch_01.ep7.el6 |
| Red Hat jboss enterprise web server 3.0 | tomcat7-el-2.2-api | 0:7.0.59-51_patch_01.ep7.el7 |
| Red Hat jboss enterprise web server 3.0 | tomcat7-el-2.2-api | 0:7.0.59-51_patch_01.ep7.el6 |
| Red Hat jboss enterprise web server 3.0 | tomcat7-javadoc | 0:7.0.59-51_patch_01.ep7.el7 |
| Red Hat jboss enterprise web server 3.0 | tomcat7-javadoc | 0:7.0.59-51_patch_01.ep7.el6 |
| Red Hat jboss enterprise web server 3.0 | tomcat7-jsp-2.2-api | 0:7.0.59-51_patch_01.ep7.el7 |
| Red Hat jboss enterprise web server 3.0 | tomcat7-jsp-2.2-api | 0:7.0.59-51_patch_01.ep7.el6 |
| Red Hat jboss enterprise web server 3.0 | tomcat7-lib | 0:7.0.59-51_patch_01.ep7.el6 |
| Red Hat jboss enterprise web server 3.0 | tomcat7-lib | 0:7.0.59-51_patch_01.ep7.el7 |
| Red Hat jboss enterprise web server 3.0 | tomcat7-log4j | 0:7.0.59-51_patch_01.ep7.el6 |
| Red Hat jboss enterprise web server 3.0 | tomcat7-log4j | 0:7.0.59-51_patch_01.ep7.el7 |
| Red Hat jboss enterprise web server 3.0 | tomcat7-servlet-3.0-api | 0:7.0.59-51_patch_01.ep7.el7 |
| Red Hat jboss enterprise web server 3.0 | tomcat7-servlet-3.0-api | 0:7.0.59-51_patch_01.ep7.el6 |
| Red Hat jboss enterprise web server 3.0 | tomcat7-webapps | 0:7.0.59-51_patch_01.ep7.el7 |
| Red Hat jboss enterprise web server 3.0 | tomcat7-webapps | 0:7.0.59-51_patch_01.ep7.el6 |
| Red Hat jboss enterprise web server 3.0 | tomcat8 | 0:8.0.18-62_patch_01.ep7.el6 |
| Red Hat jboss enterprise web server 3.0 | tomcat8 | 0:8.0.18-62_patch_01.ep7.el7 |
| Red Hat jboss enterprise web server 3.0 | tomcat8-admin-webapps | 0:8.0.18-62_patch_01.ep7.el7 |
| Red Hat jboss enterprise web server 3.0 | tomcat8-admin-webapps | 0:8.0.18-62_patch_01.ep7.el6 |
| Red Hat jboss enterprise web server 3.0 | tomcat8-docs-webapp | 0:8.0.18-62_patch_01.ep7.el6 |
| Red Hat jboss enterprise web server 3.0 | tomcat8-docs-webapp | 0:8.0.18-62_patch_01.ep7.el7 |
| Red Hat jboss enterprise web server 3.0 | tomcat8-el-2.2-api | 0:8.0.18-62_patch_01.ep7.el6 |
| Red Hat jboss enterprise web server 3.0 | tomcat8-el-2.2-api | 0:8.0.18-62_patch_01.ep7.el7 |
| Red Hat jboss enterprise web server 3.0 | tomcat8-javadoc | 0:8.0.18-62_patch_01.ep7.el7 |
| Red Hat jboss enterprise web server 3.0 | tomcat8-javadoc | 0:8.0.18-62_patch_01.ep7.el6 |
| Red Hat jboss enterprise web server 3.0 | tomcat8-jsp-2.3-api | 0:8.0.18-62_patch_01.ep7.el6 |
| Red Hat jboss enterprise web server 3.0 | tomcat8-jsp-2.3-api | 0:8.0.18-62_patch_01.ep7.el7 |
| Red Hat jboss enterprise web server 3.0 | tomcat8-lib | 0:8.0.18-62_patch_01.ep7.el6 |
| Red Hat jboss enterprise web server 3.0 | tomcat8-lib | 0:8.0.18-62_patch_01.ep7.el7 |
| Red Hat jboss enterprise web server 3.0 | tomcat8-log4j | 0:8.0.18-62_patch_01.ep7.el7 |
| Red Hat jboss enterprise web server 3.0 | tomcat8-log4j | 0:8.0.18-62_patch_01.ep7.el6 |
| Red Hat jboss enterprise web server 3.0 | tomcat8-servlet-3.1-api | 0:8.0.18-62_patch_01.ep7.el7 |
| Red Hat jboss enterprise web server 3.0 | tomcat8-servlet-3.1-api | 0:8.0.18-62_patch_01.ep7.el6 |
| Red Hat jboss enterprise web server 3.0 | tomcat8-webapps | 0:8.0.18-62_patch_01.ep7.el7 |
| Red Hat jboss enterprise web server 3.0 | tomcat8-webapps | 0:8.0.18-62_patch_01.ep7.el6 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | tomcat6 | 6.0.53-0.56.1 |
| SUSE Linux Enterprise Server 11 SP3-LTSS | tomcat6 | 6.0.53-0.56.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | tomcat6 | 6.0.53-0.56.1 |
| SUSE Linux Enterprise Server 11 SP4 | tomcat6 | 6.0.45-0.53.2 |
| SUSE Linux Enterprise Server 11 SP4 | tomcat6 | 6.0.53-0.56.1 |
| SUSE Linux Enterprise Server 12 SP1 | tomcat | 8.0.32-8.7 |
| SUSE Linux Enterprise Server 12-LTSS | tomcat | 7.0.78-7.13.4 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | tomcat6 | 6.0.45-0.53.2 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | tomcat6 | 6.0.53-0.56.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | tomcat | 7.0.78-7.13.4 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | tomcat | 8.0.32-8.7 |
| Ubuntu 14.04 LTS | tomcat7 | 7.0.52-1ubuntu0.8 |
| Ubuntu 16.04 LTS | tomcat8 | 8.0.32-1ubuntu1.3 |
| Ubuntu Pro 14.04 LTS | tomcat6 | no fix |
| Ubuntu Pro 16.04 LTS | tomcat7 | 7.0.68-1ubuntu0.4+esm1 |