Description

org/apache/tomcat/util/net/NioEndpoint.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.28, when the NIO connector is used in conjunction with sendfile and HTTPS, allows remote attackers to cause a denial of service (infinite loop) by terminating the connection during the reading of a response.

Remediation

References

CVE-2012-4534

Related Vulnerabilities

WordPress Plugin Ninja Announcements Lite 'ninja_annc.php' SQL Injection (1.2.3)

OpenSSL Cryptographic Issues Vulnerability (CVE-2006-4339)

WordPress Plugin Hupso Share Buttons for Twitter, Facebook & Google+ Multiple Unspecified Vulnerabilities (4.0.3)

Oracle JRE CVE-2013-2421 Vulnerability (CVE-2013-2421)

Drupal Core 7.x Cross-Site Request Forgery (7.0 - 7.12)

Severity

Low

Classification

CVE-2012-4534

Tags

Missing Update Known Vulnerabilities