CVE-2012-2733 in Tomcat
Summary
java/org/apache/coyote/http11/InternalNioInputBuffer.java in the HTTP NIO connector in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.28 does not properly restrict the request-header size, which allows remote attackers to cause a denial of service (memory consumption) via a large amount of header data.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Reservation
05/14/2012
Disclosure
11/16/2012
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 62929 | Apache Tomcat NIO Connector input validation | 20 | Not defined | Official fix | CVE-2012-2733 |