Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2012-2733
5
MEDIUMCVSS v2
Published
November 16, 2012
Affected
1 project
Assigned by
Red Hat
Severity scale
010
Description
java/org/apache/coyote/http11/InternalNioInputBuffer.java in the HTTP NIO connector in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.28 does not properly restrict the request-header size, which allows remote attackers to cause a denial of service (memory consumption) via a large amount of header data.
apache/tomcat
GitHubApache Tomcat
GitHubApache Tomcat= 6.0.33, = 6.0.0, = 6.0.6, = 6.0.4, = 6.0.11, = 6.0.7, = 6.0.15, = 6.0.20, = 6.0.17, = 6.0.10, = 6.0, = 6.0.14, = 6.0.29, = 6.0.1, = 6.0.3, = 6.0.12, = 6.0.9, = 6.0.32, = 6.0.28, = 6.0.24, = 6.0.31, = 6.0.2, = 6.0.26, = 6.0.27, = 6.0.8, = 6.0.18, = 6.0.13, = 6.0.19, = 6.0.16, = 6.0.30, = 6.0.5, = 6.0.35, = 7.0.2, = 7.0.12, = 7.0.20, = 7.0.8, = 7.0.1, = 7.0.5, = 7.0.4, = 7.0.22, = 7.0.6, = 7.0.21, = 7.0.18, = 7.0.14, = 7.0.10, = 7.0.13, = 7.0.17, = 7.0.0, = 7.0.9, = 7.0.15, = 7.0.23, = 7.0.11, = 7.0.25, = 7.0.16, = 7.0.7, = 7.0.19, = 7.0.3NVD