CVE-2012-4534 in Tomcat
Summary
org/apache/tomcat/util/net/NioEndpoint.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.28, when the NIO connector is used in conjunction with sendfile and HTTPS, allows remote attackers to cause a denial of service (infinite loop) by terminating the connection during the reading of a response.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
08/21/2012
Disclosure
12/19/2012
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 7075 | Apache Tomcat NIO Connector NioEndpoint.java resource management | 399 | Proof-of-Concept | Official fix | CVE-2012-4534 |