Description

Apache Tomcat 7.0.0 through 7.0.6 and 6.0.0 through 6.0.30 does not enforce the maxHttpHeaderSize limit for requests involving the NIO HTTP connector, which allows remote attackers to cause a denial of service (OutOfMemoryError) via a crafted request.

Remediation

References

CVE-2011-0534

Related Vulnerabilities

Jboss EAP Out-of-bounds Read Vulnerability (CVE-2019-0210)

WordPress Plugin Nmedia WordPress Member Conversation 'doupload.php' Arbitrary File Upload (1.3)

Joomla! Core 1.5.x Arbitrary File Upload (1.5.0 - 1.5.15)

WordPress Plugin WP Photo Album Plus Cross-Site Scripting (4.9.2)

WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-2404)

Severity

Medium

Classification

CVE-2011-0534

Tags

Missing Update Known Vulnerabilities