{"action":"Upgrade tomcat-native to 1.2.17-1 or later.","affected":[{"fixed":"1.2.17-1","introduced":"0"}],"component":"tomcat-native","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["1.2.17-1"],"id":"tcs_01M5NDJ21TXTG2P88KB16B7TQ7","modified_at":"2026-10-23T18:03:09.368247989Z","published_at":"2018-07-31T13:29:00.797Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2018-8019","https://security-tracker.debian.org/tracker/CVE-2018-8019"],"severity":{"label":"high","score":7.4},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2018-8019","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2018-8019"}],"summary":"When using an OCSP responder Apache Tomcat Native 1.2.0 to 1.2.16 and 1.1.23 to 1.1.34 did not correctly handle invalid responses. This allowed for revoked client certificates to be incorrectly identi"}