Every CVE Search/ Get API key

CVE-2017-15698

When parsing the AIA-Extension field of a client certificate, Apache Tomcat Native Connector 1.2...

5.9 MediumFix available

When parsing the AIA-Extension field of a client certificate, Apache Tomcat Native Connector 1.2.0 to 1.2.14 and 1.1.23 to 1.1.34 did not correctly handle fields longer than 127 bytes. The result of the parsing error was to skip the OCSP check. It was therefore possible for client certificates that should have been rejected (if the OCSP check had been made) to be accepted. Users not using OCSP checks are not affected by this vulnerability.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
High
Availability
None

Exploit likelihood

3.53%Down 3.0 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 5.9

When parsing the AIA-Extension field of a client certificate, Apache Tomcat Native Connector 1.2.0 to 1.2.14 and 1.1.23 to 1.1.34 did not correctly handle fields longer than 127 bytes. The result of the parsing error was to skip the OCSP check. It was therefore possible for client certificates that should have been rejected (if the OCSP check had been made) to be accepted. Users not using OCSP checks are not affected by this vulnerability.

Record
CVE-2017-15698
CVSS 3.0
5.9 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Weakness
CWE-295
Updated
2026-11-02
CVE List No score

When parsing the AIA-Extension field of a client certificate, Apache Tomcat Native Connector 1.2.0 to 1.2.14 and 1.1.23 to 1.1.34 did not correctly handle fields longer than 127 bytes. The result of the parsing error was to skip the OCSP check. It was therefore possible for client certificates that should have been rejected (if the OCSP check had been made) to be accepted. Users not using OCSP checks are not affected by this vulnerability.

Record
CVE-2017-15698
Updated
2026-11-02
EUVDEUVD-2017-7135 No score

When parsing the AIA-Extension field of a client certificate, Apache Tomcat Native Connector 1.2.0 to 1.2.14 and 1.1.23 to 1.1.34 did not correctly handle fields longer than 127 bytes. The result of the parsing error was to skip the OCSP check. It was therefore possible for client certificates that should have been rejected (if the OCSP check had been made) to be accepted. Users not using OCSP checks are not affected by this vulnerability.

Record
EUVD-2017-7135
Updated
2026-11-03
GitHub AdvisoriesGHSA-ppg5-72hh-9jj4 5.9

When parsing the AIA-Extension field of a client certificate, Apache Tomcat Native Connector 1.2...

When parsing the AIA-Extension field of a client certificate, Apache Tomcat Native Connector 1.2.0 to 1.2.14 and 1.1.23 to 1.1.34 did not correctly handle fields longer than 127 bytes. The result of the parsing error was to skip the OCSP check. It was therefore possible for client certificates that should have been rejected (if the OCSP check had been made) to be accepted. Users not using OCSP checks are not affected by this vulnerability.

Record
GHSA-ppg5-72hh-9jj4
CVSS 3.0
5.9 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Weakness
CWE-295
Updated
2026-11-02
OSV 5.9

When parsing the AIA-Extension field of a client certificate, Apache Tomcat Native Connector 1.2.0 to 1.2.14 and 1.1.23 to 1.1.34 did not correctly handle fields longer than 127 bytes. The result of the parsing error was to skip the OCSP check. It was therefore possible for client certificates that should have been rejected (if the OCSP check had been made) to be accepted. Users not using OCSP checks are not affected by this vulnerability.

Record
CVE-2017-15698
CVSS 3.0
5.9 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVDEBIAN-CVE-2017-15698 5.9

When parsing the AIA-Extension field of a client certificate, Apache Tomcat Native Connector 1.2.0 to 1.2.14 and 1.1.23 to 1.1.34 did not correctly handle fields longer than 127 bytes. The result of the parsing error was to skip the OCSP check. It was therefore possible for client certificates that should have been rejected (if the OCSP check had been made) to be accepted. Users not using OCSP checks are not affected by this vulnerability.

Record
DEBIAN-CVE-2017-15698
CVSS 3.0
5.9 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
Show 4 moreShow less
OSVRHSA-2018:0466 8.1

Red Hat Security Advisory: Red Hat JBoss Web Server 3.1.0 Service Pack 2 security update

Record
RHSA-2018:0466
CVSS 3.0
8.1 HighCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2017-15698 5.9

When parsing the AIA-Extension field of a client certificate, Apache Tomcat Native Connector 1.2.0 to 1.2.14 and 1.1.23 to 1.1.34 did not correctly handle fields longer than 127 bytes. The result of the parsing error was to skip the OCSP check. It was therefore possible for client certificates that should have been rejected (if the OCSP check had been made) to be accepted. Users not using OCSP checks are not affected by this vulnerability.

Record
UBUNTU-CVE-2017-15698
CVSS 3.0
5.9 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVMGASA-2018-0150 No score

Updated tomcat-native package fixes security vulnerability

When parsing the AIA-Extension field of a client certificate, Apache Tomcat Native did not correctly handle fields longer than 127 bytes. The result of the parsing error was to skip the OCSP check. It was therefore possible for client certificates that should have been rejected (if the OCSP check had been made) to be accepted. Users not using OCSP checks are not affected by this vulnerability (CVE-2017-15698).

Record
MGASA-2018-0150
Updated
2026-11-02
OSVSUSE-SU-2019:14014-1 No score

Security update for libtcnative-1-0

This update for libtcnative-1-0 to version 1.1.34 fixes the following issues:

  • CVE-2017-15698: Fixed an improper handling of fields with more than 127 bytes which could allow invalid client certificates to be accepted (bsc#1078679).
  • CVE-2018-8019: When using an OCSP responder did not correctly handle invalid responses. This allowed for revoked client certificates to be incorrectly identified. It was therefore possible for users to authenticate with revoked certificates when using mutual TLS (bsc#1103348).
  • CVE-2018-8020: Did not properly check OCSP pre-produced responses. Revoked client certificates may have not been properly identified, allowing for users to authenticate with revoked certificates to connections that require mutual TLS (bsc#1103347).

For a complete list of changes please see http://tomcat.apache.org/native-1.1-doc/miscellaneous/changelog.html

Record
SUSE-SU-2019:14014-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
tomcat-native
Debian:12
 before 1.2.16-1
1.2.16-1
tomcat-native
Debian:13
 before 1.2.16-1
1.2.16-1
tomcat-native
Debian:14
 before 1.2.16-1
1.2.16-1
tomcat-native
Debian:7
 before 1.1.24-1+deb7u1, plus listed versions
1.1.24-1
1.1.24-1+deb7u1
tomcat-native
Debian:8
 before 1.1.32~repack-2+deb8u1, plus listed versions
1.1.32~repack-2
1.1.32~repack-2+deb8u1
tomcat-native
Debian:9
 before 1.2.12-2+deb9u1, plus listed versions
1.2.12-2
1.2.12-2+deb9u1
tomcat-native
Mageia:6
 before 1.2.16-1.mga6
1.2.16-1.mga6
mod_cluster
Red Hat:jboss_enterprise_web_server:3.1::el6
From an advisory covering 7 CVEs
 before 0:1.3.8-2.Final_redhat_2.1.ep7.el6
0:1.3.8-2.Final_redhat_2.1.ep7.el6
mod_cluster-tomcat7
Red Hat:jboss_enterprise_web_server:3.1::el6
From an advisory covering 7 CVEs
 before 0:1.3.8-2.Final_redhat_2.1.ep7.el6
0:1.3.8-2.Final_redhat_2.1.ep7.el6
mod_cluster-tomcat8
Red Hat:jboss_enterprise_web_server:3.1::el6
From an advisory covering 7 CVEs
 before 0:1.3.8-2.Final_redhat_2.1.ep7.el6
0:1.3.8-2.Final_redhat_2.1.ep7.el6
Show 64 moreShow less
Affected packages
PackageAffectedFixed
tomcat-native
Red Hat:jboss_enterprise_web_server:3.1::el6
From an advisory covering 7 CVEs
 before 0:1.2.8-11.redhat_11.ep7.el6
0:1.2.8-11.redhat_11.ep7.el6
tomcat-native-debuginfo
Red Hat:jboss_enterprise_web_server:3.1::el6
From an advisory covering 7 CVEs
 before 0:1.2.8-11.redhat_11.ep7.el6
0:1.2.8-11.redhat_11.ep7.el6
tomcat-vault
Red Hat:jboss_enterprise_web_server:3.1::el6
From an advisory covering 7 CVEs
 before 0:1.1.6-1.Final_redhat_1.1.ep7.el6
0:1.1.6-1.Final_redhat_1.1.ep7.el6
tomcat-vault-tomcat7
Red Hat:jboss_enterprise_web_server:3.1::el6
From an advisory covering 7 CVEs
 before 0:1.1.6-1.Final_redhat_1.1.ep7.el6
0:1.1.6-1.Final_redhat_1.1.ep7.el6
tomcat-vault-tomcat8
Red Hat:jboss_enterprise_web_server:3.1::el6
From an advisory covering 7 CVEs
 before 0:1.1.6-1.Final_redhat_1.1.ep7.el6
0:1.1.6-1.Final_redhat_1.1.ep7.el6
tomcat7
Red Hat:jboss_enterprise_web_server:3.1::el6
From an advisory covering 7 CVEs
 before 0:7.0.70-25.ep7.el6
0:7.0.70-25.ep7.el6
tomcat7-admin-webapps
Red Hat:jboss_enterprise_web_server:3.1::el6
From an advisory covering 7 CVEs
 before 0:7.0.70-25.ep7.el6
0:7.0.70-25.ep7.el6
tomcat7-docs-webapp
Red Hat:jboss_enterprise_web_server:3.1::el6
From an advisory covering 7 CVEs
 before 0:7.0.70-25.ep7.el6
0:7.0.70-25.ep7.el6
tomcat7-el-2.2-api
Red Hat:jboss_enterprise_web_server:3.1::el6
From an advisory covering 7 CVEs
 before 0:7.0.70-25.ep7.el6
0:7.0.70-25.ep7.el6
tomcat7-javadoc
Red Hat:jboss_enterprise_web_server:3.1::el6
From an advisory covering 7 CVEs
 before 0:7.0.70-25.ep7.el6
0:7.0.70-25.ep7.el6
tomcat7-jsp-2.2-api
Red Hat:jboss_enterprise_web_server:3.1::el6
From an advisory covering 7 CVEs
 before 0:7.0.70-25.ep7.el6
0:7.0.70-25.ep7.el6
tomcat7-jsvc
Red Hat:jboss_enterprise_web_server:3.1::el6
From an advisory covering 7 CVEs
 before 0:7.0.70-25.ep7.el6
0:7.0.70-25.ep7.el6
tomcat7-lib
Red Hat:jboss_enterprise_web_server:3.1::el6
From an advisory covering 7 CVEs
 before 0:7.0.70-25.ep7.el6
0:7.0.70-25.ep7.el6
tomcat7-log4j
Red Hat:jboss_enterprise_web_server:3.1::el6
From an advisory covering 7 CVEs
 before 0:7.0.70-25.ep7.el6
0:7.0.70-25.ep7.el6
tomcat7-selinux
Red Hat:jboss_enterprise_web_server:3.1::el6
From an advisory covering 7 CVEs
 before 0:7.0.70-25.ep7.el6
0:7.0.70-25.ep7.el6
tomcat7-servlet-3.0-api
Red Hat:jboss_enterprise_web_server:3.1::el6
From an advisory covering 7 CVEs
 before 0:7.0.70-25.ep7.el6
0:7.0.70-25.ep7.el6
tomcat7-webapps
Red Hat:jboss_enterprise_web_server:3.1::el6
From an advisory covering 7 CVEs
 before 0:7.0.70-25.ep7.el6
0:7.0.70-25.ep7.el6
tomcat8
Red Hat:jboss_enterprise_web_server:3.1::el6
From an advisory covering 7 CVEs
 before 0:8.0.36-29.ep7.el6
0:8.0.36-29.ep7.el6
tomcat8-admin-webapps
Red Hat:jboss_enterprise_web_server:3.1::el6
From an advisory covering 7 CVEs
 before 0:8.0.36-29.ep7.el6
0:8.0.36-29.ep7.el6
tomcat8-docs-webapp
Red Hat:jboss_enterprise_web_server:3.1::el6
From an advisory covering 7 CVEs
 before 0:8.0.36-29.ep7.el6
0:8.0.36-29.ep7.el6
tomcat8-el-2.2-api
Red Hat:jboss_enterprise_web_server:3.1::el6
From an advisory covering 7 CVEs
 before 0:8.0.36-29.ep7.el6
0:8.0.36-29.ep7.el6
tomcat8-javadoc
Red Hat:jboss_enterprise_web_server:3.1::el6
From an advisory covering 7 CVEs
 before 0:8.0.36-29.ep7.el6
0:8.0.36-29.ep7.el6
tomcat8-jsp-2.3-api
Red Hat:jboss_enterprise_web_server:3.1::el6
From an advisory covering 7 CVEs
 before 0:8.0.36-29.ep7.el6
0:8.0.36-29.ep7.el6
tomcat8-jsvc
Red Hat:jboss_enterprise_web_server:3.1::el6
From an advisory covering 7 CVEs
 before 0:8.0.36-29.ep7.el6
0:8.0.36-29.ep7.el6
tomcat8-lib
Red Hat:jboss_enterprise_web_server:3.1::el6
From an advisory covering 7 CVEs
 before 0:8.0.36-29.ep7.el6
0:8.0.36-29.ep7.el6
tomcat8-log4j
Red Hat:jboss_enterprise_web_server:3.1::el6
From an advisory covering 7 CVEs
 before 0:8.0.36-29.ep7.el6
0:8.0.36-29.ep7.el6
tomcat8-selinux
Red Hat:jboss_enterprise_web_server:3.1::el6
From an advisory covering 7 CVEs
 before 0:8.0.36-29.ep7.el6
0:8.0.36-29.ep7.el6
tomcat8-servlet-3.1-api
Red Hat:jboss_enterprise_web_server:3.1::el6
From an advisory covering 7 CVEs
 before 0:8.0.36-29.ep7.el6
0:8.0.36-29.ep7.el6
tomcat8-webapps
Red Hat:jboss_enterprise_web_server:3.1::el6
From an advisory covering 7 CVEs
 before 0:8.0.36-29.ep7.el6
0:8.0.36-29.ep7.el6
mod_cluster
Red Hat:jboss_enterprise_web_server:3.1::el7
From an advisory covering 7 CVEs
 before 0:1.3.8-2.Final_redhat_2.1.ep7.el7
0:1.3.8-2.Final_redhat_2.1.ep7.el7
mod_cluster-tomcat7
Red Hat:jboss_enterprise_web_server:3.1::el7
From an advisory covering 7 CVEs
 before 0:1.3.8-2.Final_redhat_2.1.ep7.el7
0:1.3.8-2.Final_redhat_2.1.ep7.el7
mod_cluster-tomcat8
Red Hat:jboss_enterprise_web_server:3.1::el7
From an advisory covering 7 CVEs
 before 0:1.3.8-2.Final_redhat_2.1.ep7.el7
0:1.3.8-2.Final_redhat_2.1.ep7.el7
tomcat-native
Red Hat:jboss_enterprise_web_server:3.1::el7
From an advisory covering 7 CVEs
 before 0:1.2.8-11.redhat_11.ep7.el7
0:1.2.8-11.redhat_11.ep7.el7
tomcat-native-debuginfo
Red Hat:jboss_enterprise_web_server:3.1::el7
From an advisory covering 7 CVEs
 before 0:1.2.8-11.redhat_11.ep7.el7
0:1.2.8-11.redhat_11.ep7.el7
tomcat-vault
Red Hat:jboss_enterprise_web_server:3.1::el7
From an advisory covering 7 CVEs
 before 0:1.1.6-1.Final_redhat_1.1.ep7.el7
0:1.1.6-1.Final_redhat_1.1.ep7.el7
tomcat-vault-tomcat7
Red Hat:jboss_enterprise_web_server:3.1::el7
From an advisory covering 7 CVEs
 before 0:1.1.6-1.Final_redhat_1.1.ep7.el7
0:1.1.6-1.Final_redhat_1.1.ep7.el7
tomcat-vault-tomcat8
Red Hat:jboss_enterprise_web_server:3.1::el7
From an advisory covering 7 CVEs
 before 0:1.1.6-1.Final_redhat_1.1.ep7.el7
0:1.1.6-1.Final_redhat_1.1.ep7.el7
tomcat7
Red Hat:jboss_enterprise_web_server:3.1::el7
From an advisory covering 7 CVEs
 before 0:7.0.70-25.ep7.el7
0:7.0.70-25.ep7.el7
tomcat7-admin-webapps
Red Hat:jboss_enterprise_web_server:3.1::el7
From an advisory covering 7 CVEs
 before 0:7.0.70-25.ep7.el7
0:7.0.70-25.ep7.el7
tomcat7-docs-webapp
Red Hat:jboss_enterprise_web_server:3.1::el7
From an advisory covering 7 CVEs
 before 0:7.0.70-25.ep7.el7
0:7.0.70-25.ep7.el7
tomcat7-el-2.2-api
Red Hat:jboss_enterprise_web_server:3.1::el7
From an advisory covering 7 CVEs
 before 0:7.0.70-25.ep7.el7
0:7.0.70-25.ep7.el7
tomcat7-javadoc
Red Hat:jboss_enterprise_web_server:3.1::el7
From an advisory covering 7 CVEs
 before 0:7.0.70-25.ep7.el7
0:7.0.70-25.ep7.el7
tomcat7-jsp-2.2-api
Red Hat:jboss_enterprise_web_server:3.1::el7
From an advisory covering 7 CVEs
 before 0:7.0.70-25.ep7.el7
0:7.0.70-25.ep7.el7
tomcat7-jsvc
Red Hat:jboss_enterprise_web_server:3.1::el7
From an advisory covering 7 CVEs
 before 0:7.0.70-25.ep7.el7
0:7.0.70-25.ep7.el7
tomcat7-lib
Red Hat:jboss_enterprise_web_server:3.1::el7
From an advisory covering 7 CVEs
 before 0:7.0.70-25.ep7.el7
0:7.0.70-25.ep7.el7
tomcat7-log4j
Red Hat:jboss_enterprise_web_server:3.1::el7
From an advisory covering 7 CVEs
 before 0:7.0.70-25.ep7.el7
0:7.0.70-25.ep7.el7
tomcat7-selinux
Red Hat:jboss_enterprise_web_server:3.1::el7
From an advisory covering 7 CVEs
 before 0:7.0.70-25.ep7.el7
0:7.0.70-25.ep7.el7
tomcat7-servlet-3.0-api
Red Hat:jboss_enterprise_web_server:3.1::el7
From an advisory covering 7 CVEs
 before 0:7.0.70-25.ep7.el7
0:7.0.70-25.ep7.el7
tomcat7-webapps
Red Hat:jboss_enterprise_web_server:3.1::el7
From an advisory covering 7 CVEs
 before 0:7.0.70-25.ep7.el7
0:7.0.70-25.ep7.el7
tomcat8
Red Hat:jboss_enterprise_web_server:3.1::el7
From an advisory covering 7 CVEs
 before 0:8.0.36-29.ep7.el7
0:8.0.36-29.ep7.el7
tomcat8-admin-webapps
Red Hat:jboss_enterprise_web_server:3.1::el7
From an advisory covering 7 CVEs
 before 0:8.0.36-29.ep7.el7
0:8.0.36-29.ep7.el7
tomcat8-docs-webapp
Red Hat:jboss_enterprise_web_server:3.1::el7
From an advisory covering 7 CVEs
 before 0:8.0.36-29.ep7.el7
0:8.0.36-29.ep7.el7
tomcat8-el-2.2-api
Red Hat:jboss_enterprise_web_server:3.1::el7
From an advisory covering 7 CVEs
 before 0:8.0.36-29.ep7.el7
0:8.0.36-29.ep7.el7
tomcat8-javadoc
Red Hat:jboss_enterprise_web_server:3.1::el7
From an advisory covering 7 CVEs
 before 0:8.0.36-29.ep7.el7
0:8.0.36-29.ep7.el7
tomcat8-jsp-2.3-api
Red Hat:jboss_enterprise_web_server:3.1::el7
From an advisory covering 7 CVEs
 before 0:8.0.36-29.ep7.el7
0:8.0.36-29.ep7.el7
tomcat8-jsvc
Red Hat:jboss_enterprise_web_server:3.1::el7
From an advisory covering 7 CVEs
 before 0:8.0.36-29.ep7.el7
0:8.0.36-29.ep7.el7
tomcat8-lib
Red Hat:jboss_enterprise_web_server:3.1::el7
From an advisory covering 7 CVEs
 before 0:8.0.36-29.ep7.el7
0:8.0.36-29.ep7.el7
tomcat8-log4j
Red Hat:jboss_enterprise_web_server:3.1::el7
From an advisory covering 7 CVEs
 before 0:8.0.36-29.ep7.el7
0:8.0.36-29.ep7.el7
tomcat8-selinux
Red Hat:jboss_enterprise_web_server:3.1::el7
From an advisory covering 7 CVEs
 before 0:8.0.36-29.ep7.el7
0:8.0.36-29.ep7.el7
tomcat8-servlet-3.1-api
Red Hat:jboss_enterprise_web_server:3.1::el7
From an advisory covering 7 CVEs
 before 0:8.0.36-29.ep7.el7
0:8.0.36-29.ep7.el7
tomcat8-webapps
Red Hat:jboss_enterprise_web_server:3.1::el7
From an advisory covering 7 CVEs
 before 0:8.0.36-29.ep7.el7
0:8.0.36-29.ep7.el7
libtcnative-1-0
SUSE:Linux Enterprise Point of Sale 11 SP3
From an advisory covering 3 CVEs
 before 1.3.4-12.5.5.2
1.3.4-12.5.5.2
libtcnative-1-0
SUSE:Linux Enterprise Server 11 SP4-LTSS
From an advisory covering 3 CVEs
 before 1.3.4-12.5.5.2
1.3.4-12.5.5.2
tomcat-native
Ubuntu:16.04:LTS
 All versions, plus listed versions
1.1.33-1
 None known

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2017-15698 is a medium vulnerability (CVSS 5.9) in Apache Tomcat Native, published January 31, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.53%, the 89th percentile. Fixed in tomcat-native 1.2.16-1.

References

Show 59 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open