Description
java/org/apache/coyote/http11/InternalNioInputBuffer.java in the HTTP NIO connector in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.28 does not properly restrict the request-header size, which allows remote attackers to cause a denial of service (memory consumption) via a large amount of header data.
Remediation
References
Related Vulnerabilities
Jenkins Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2024-43044)
WordPress Plugin Gravity Forms Cross-Site Scripting (1.9.15.11)
Artifactory Improper Privilege Management Vulnerability (CVE-2022-0668)
SharePoint Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-8580)