{"action":"Upgrade org.apache.tomcat:tomcat to 5.5.33 (5.x), 6.0.32 (6.x) or 7.0.7 (7.x) or later.","affected":[{"fixed":"7.0.7","introduced":"7.0.0"},{"fixed":"6.0.32","introduced":"6.0.0"},{"fixed":"5.5.33","introduced":"5.5.0"}],"component":"org.apache.tomcat:tomcat","cve_ids":["CVE-2010-4476"],"ecosystem":"Maven","epss":0.2349,"exploited":false,"fixed_versions":["7.0.7","6.0.32","5.5.33"],"ghsa_id":"GHSA-gvgc-rxmh-5hvw","id":"tcs_01M5N8Z0APD5B280GYPFR5GR06","modified_at":"2024-02-27T22:41:44.676837Z","published_at":"2022-05-14T02:16:07Z","references":["https://osv.dev/vulnerability/GHSA-gvgc-rxmh-5hvw","https://nvd.nist.gov/vuln/detail/CVE-2010-4476","https://github.com/apache/tomcat/commit/407841c426dc52a4c6b8ccd297df6c484a540056","https://github.com/apache/tomcat/commit/69ef147c4498397e8f644a0699cf588b45a05120","https://github.com/apache/tomcat/commit/b0c1eeaa0d303bcb42651b222037e079d0634c01","https://github.com/apache/tomcat","https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12662","https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12745","https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14328","https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14589","https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19493","https://svn.apache.org/viewvc?view=revision&revision=1066244","https://svn.apache.org/viewvc?view=revision&revision=1066315","https://svn.apache.org/viewvc?view=revision&revision=1066318","https://tomcat.apache.org/security-5.html","https://tomcat.apache.org/security-6.html","https://tomcat.apache.org/security-7.html","http://blog.fortify.com/blog/2011/02/08/Double-Trouble","http://blogs.oracle.com/security/2011/02/security_alert_for_cve-2010-44.html","http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053926.html","http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053934.html","http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00004.html","http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00010.html","http://marc.info/?l=bugtraq&m=129899347607632&w=2","http://marc.info/?l=bugtraq&m=129960314701922&w=2","http://marc.info/?l=bugtraq&m=130168502603566&w=2","http://marc.info/?l=bugtraq&m=130270785502599&w=2","http://marc.info/?l=bugtraq&m=130497132406206&w=2","http://marc.info/?l=bugtraq&m=130497185606818&w=2","http://marc.info/?l=bugtraq&m=130514352726432&w=2","http://marc.info/?l=bugtraq&m=131041767210772&w=2","http://marc.info/?l=bugtraq&m=132215163318824&w=2","http://marc.info/?l=bugtraq&m=133469267822771&w=2","http://marc.info/?l=bugtraq&m=133728004526190&w=2","http://marc.info/?l=bugtraq&m=134254866602253&w=2","http://marc.info/?l=bugtraq&m=134254957702612&w=2","http://marc.info/?l=bugtraq&m=136485229118404&w=2","http://security.gentoo.org/glsa/glsa-201406-32.xml","http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5098550.html","http://www-01.ibm.com/support/docview.wss?uid=swg1IZ94423","http://www-01.ibm.com/support/docview.wss?uid=swg1PM31983","http://www-01.ibm.com/support/docview.wss?uid=swg21468358","http://www.debian.org/security/2011/dsa-2161","http://www.exploringbinary.com/java-hangs-when-converting-2-2250738585072012e-308","http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS11-003/index.html","http://www.ibm.com/support/docview.wss?uid=swg24029497","http://www.ibm.com/support/docview.wss?uid=swg24029498","http://www.mandriva.com/security/advisories?name=MDVSA-2011:054","http://www.oracle.com/technetwork/topics/security/alert-cve-2010-4476-305811.html","http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html","http://www.oracle.com/technetwork/topics/security/javacpufeb2011-304611.html","http://www.redhat.com/support/errata/RHSA-2011-0210.html","http://www.redhat.com/support/errata/RHSA-2011-0211.html","http://www.redhat.com/support/errata/RHSA-2011-0212.html","http://www.redhat.com/support/errata/RHSA-2011-0213.html","http://www.redhat.com/support/errata/RHSA-2011-0214.html","http://www.redhat.com/support/errata/RHSA-2011-0282.html","http://www.redhat.com/support/errata/RHSA-2011-0333.html","http://www.redhat.com/support/errata/RHSA-2011-0334.html","http://www.redhat.com/support/errata/RHSA-2011-0880.html","http://www13.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02720715&admit=109447627+1298159618320+28353475"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-gvgc-rxmh-5hvw","url":"https://osv.dev/vulnerability/GHSA-gvgc-rxmh-5hvw"}],"summary":"Apache Tomcat affected by infinite loop in Double.parseDouble method in Java Runtime Environment"}