Published: 16/11/2012 Updated: 19/09/2017

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

java/org/apache/coyote/http11/InternalNioInputBuffer.java in the HTTP NIO connector in Apache Tomcat 6.x prior to 6.0.36 and 7.x prior to 7.0.28 does not properly restrict the request-header size, which allows remote malicious users to cause a denial of service (memory consumption) via a large amount of header data.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apache tomcat 6.0.6
apache tomcat 6.0.7
apache tomcat 6.0.17
apache tomcat 6.0.0
apache tomcat 6.0.2
apache tomcat 6.0.26
apache tomcat 6.0.10
apache tomcat 6.0.20
apache tomcat 6.0
apache tomcat 6.0.14
apache tomcat 6.0.29
apache tomcat 6.0.1
apache tomcat 6.0.27
apache tomcat 6.0.3
apache tomcat 6.0.12
apache tomcat 6.0.11
apache tomcat 6.0.9
apache tomcat 6.0.8
apache tomcat 6.0.33
apache tomcat 6.0.4
apache tomcat 6.0.18
apache tomcat 6.0.32
apache tomcat 6.0.13
apache tomcat 6.0.19
apache tomcat 6.0.16
apache tomcat 6.0.15
apache tomcat 6.0.30
apache tomcat 6.0.28
apache tomcat 6.0.5
apache tomcat 6.0.24
apache tomcat 6.0.31
apache tomcat 6.0.35
apache tomcat 7.0.6
apache tomcat 7.0.21
apache tomcat 7.0.18
apache tomcat 7.0.14
apache tomcat 7.0.10
apache tomcat 7.0.12
apache tomcat 7.0.4
apache tomcat 7.0.8
apache tomcat 7.0.13
apache tomcat 7.0.5
apache tomcat 7.0.20
apache tomcat 7.0.17
apache tomcat 7.0.0
apache tomcat 7.0.3
apache tomcat 7.0.22
apache tomcat 7.0.9
apache tomcat 7.0.15
apache tomcat 7.0.23
apache tomcat 7.0.11
apache tomcat 7.0.2
apache tomcat 7.0.25
apache tomcat 7.0.16
apache tomcat 7.0.1
apache tomcat 7.0.7
apache tomcat 7.0.19

Debian Bug report logs - #692439 tomcat6: CVE-2012-2733 CVE-2012-3439 Package: tomcat6; Maintainer for tomcat6 is Debian Java Maintainers <pkg-java-maintainers@listsaliothdebianorg>; Reported by: Moritz Muehlenhoff <jmm@inutilorg> Date: Tue, 6 Nov 2012 10:42:01 UTC Severity: grave Tags: security Fixed in versio ...

Several security issues were fixed in Apache Tomcat ...

Synopsis Moderate: tomcat6 security update Type/Severity Security Advisory: Moderate Topic Updated tomcat6 packages that fix multiple security issues are nowavailable for JBoss Enterprise Web Server 200 for Red Hat EnterpriseLinux 5 and 6The Red Hat Security Response Team has rated this update as having ...

Synopsis Moderate: tomcat6 security update Type/Severity Security Advisory: Moderate Topic An update for the Apache Tomcat 6 component for JBoss Enterprise Web Server200 that fixes multiple security issues is now available from the Red HatCustomer PortalThe Red Hat Security Response Team has rated this u ...

CWE-20 http://svn.apache.org/viewvc?view=revision&revision=1350301 http://svn.apache.org/viewvc?view=revision&revision=1356208 http://tomcat.apache.org/security-7.html http://tomcat.apache.org/security-6.html http://www.ubuntu.com/usn/USN-1637-1 http://lists.opensuse.org/opensuse-updates/2012-12/msg00089.html http://lists.opensuse.org/opensuse-updates/2012-12/msg00090.html http://www.securityfocus.com/bid/56402 http://lists.opensuse.org/opensuse-updates/2013-01/msg00037.html http://www.securitytracker.com/id?1027729 http://secunia.com/advisories/51371 https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03748878 http://marc.info/?l=bugtraq&m=139344343412337&w=2 http://secunia.com/advisories/57126 http://marc.info/?l=bugtraq&m=136612293908376&w=2 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19218 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=692439 https://usn.ubuntu.com/1637-1/https://nvd.nist.gov

CVE-2012-2733

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect