Description

java/org/apache/coyote/http11/InternalNioInputBuffer.java in the HTTP NIO connector in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.28 does not properly restrict the request-header size, which allows remote attackers to cause a denial of service (memory consumption) via a large amount of header data.

Remediation

References

CVE-2012-2733

Related Vulnerabilities

Moodle Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2016-7919)

Moodle URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2019-14830)

Dolibarr Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-7994)

Cherokee Cryptographic Issues Vulnerability (CVE-2011-2190)

WordPress Plugin JobSearch WP Job Board Cross-Site Scripting (1.5.4)

Severity

Medium

Classification

CVE-2012-2733 CWE-20

Tags

Missing Update Known Vulnerabilities