GHSA-8h2q-qm9x-55jcMedium

Denial of Service in Apache Tomcat

Published
May 4, 2022
Last Modified
February 21, 2024

🔗 CVE IDs covered (1)

CVE-2012-0022 →

📋 Description

Apache Tomcat 5.5.x before 5.5.35, 6.x before 6.0.34, and 7.x before 7.0.23 uses an inefficient approach for handling parameters, which allows remote attackers to cause a denial of service (CPU consumption) via a request that contains many parameters and parameter values, a different vulnerability than CVE-2011-4858.

🎯 Affected products3

  • maven/org.apache.tomcat:tomcat:>= 5.5.0, < 5.5.35
  • maven/org.apache.tomcat:tomcat:>= 6.0.0, < 6.0.34
  • maven/org.apache.tomcat:tomcat:>= 7.0.0, < 7.0.23

🔗 References (24)