CVE-2016-6808: Apache Tomcat Jk Connector

Critical severity, CVSS 9.8. EPSS: 22.7% chance of exploitation in the next 30 days.

Buffer overflow in Apache Tomcat Connectors (mod_jk) before 1.2.42.

Affected products

• Apache Tomcat Jk Connector: before 1.2.42 (fixed in 1.2.42)

Published 2017-04-12. Last modified 2026-06-17.