Description

Apache Tomcat 5.5.x before 5.5.35, 6.x before 6.0.34, and 7.x before 7.0.23 uses an inefficient approach for handling parameters, which allows remote attackers to cause a denial of service (CPU consumption) via a request that contains many parameters and parameter values, a different vulnerability than CVE-2011-4858.

Remediation

References

CVE-2012-0022

Related Vulnerabilities

Play Framework Uncontrolled Recursion Vulnerability (CVE-2020-26882)

ownCloud Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-2047)

PHP Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability (CVE-2004-0594)

WordPress Plugin FluentSMTP-WP Mail SMTP, Amazon SES, SendGrid, MailGun and Any SMTP Connector Cross-Site Scripting (2.2.4)

Oracle JRE CVE-2017-10346 Vulnerability (CVE-2017-10346)

Severity

Medium

Classification

CVE-2012-0022

Tags

Missing Update Known Vulnerabilities