Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2011-4858
5
MEDIUMCVSS v2
Published
January 5, 2012
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Apache Tomcat before 5.5.35, 6.x before 6.0.35, and 7.x before 7.0.23 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.
apache/tomcat
GitHubApache Tomcat
GitHubApache Tomcat= 6.0.33, = 7.0.12, = 6.0.6, = 7.0.20, = 6.0.11, = 6.0.34, = 7.0.8, = 7.0.1, = 7.0.2, = 6.0.25, = 6.0.29, = 6.0.21, = 6.0.20, = 6.0.4, = 7.0.18, = 7.0.11, = 5.5.35, = 6.0.10, = 7.0.0, = 7.0.14, = 7.0.6, = 6.0.31, = 6.0.22, = 6.0.15, = 6.0.7, = 7.0.22, = 7.0.5, = 6.0.26, = 6.0.30, = 6.0.13, = 6.0.12, = 6.0.5, = 7.0.19, = 7.0.10, = 7.0.3, = 6.0.28, = 6.0.27, = 6.0.19, = 6.0.18, = 6.0.3, = 6.0.2, = 7.0.17, = 7.0.16, = 7.0.9, = 6.0.17, = 6.0.16, = 6.0.9, = 6.0.8, = 6.0.1, = 6.0.0, = 7.0.15, = 7.0.7, = 6.0.32, = 6.0.24, = 6.0.23, = 6.0.14, = 7.0.21, = 7.0.13, = 7.0.4NVD