NVD

Id
42171  
Name
CVE-2012-0022  
Description
Apache Tomcat 5.5.x before 5.5.35, 6.x before 6.0.34, and 7.x before 7.0.23 uses an inefficient approach for handling parameters, which allows remote attackers to cause a denial of service (CPU consumption) via a request that contains many parameters and parameter values, a different vulnerability than CVE-2011-4858.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2012-01-18  
Modified Date
2014-03-05  
Seq
2012-0022  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
212837 42171 CVE-2012-0022 20120117 [SECURITY] CVE-2012-0022 Apache Tomcat Denial of Service  View
212838 42171 CVE-2012-0022 HPSBUX02741  View
212839 42171 CVE-2012-0022 HPSBUX02860  View
212840 42171 CVE-2012-0022 oval:org.mitre.oval:def:16925  View
212841 42171 CVE-2012-0022 oval:org.mitre.oval:def:18934  View
212842 42171 CVE-2012-0022 RHSA-2012:0074  View
212843 42171 CVE-2012-0022 RHSA-2012:0075  View
212844 42171 CVE-2012-0022 RHSA-2012:0076  View
212845 42171 CVE-2012-0022 RHSA-2012:0077  View
212846 42171 CVE-2012-0022 RHSA-2012:0078  View
212847 42171 CVE-2012-0022 RHSA-2012:0325  View
212848 42171 CVE-2012-0022 RHSA-2012:0345  View
212849 42171 CVE-2012-0022 RHSA-2012:1331  View
212850 42171 CVE-2012-0022 http://tomcat.apache.org/security-5.html  View
212851 42171 CVE-2012-0022 http://tomcat.apache.org/security-6.html  View
212852 42171 CVE-2012-0022 http://tomcat.apache.org/security-7.html  View
212853 42171 CVE-2012-0022 DSA-2401  View
212854 42171 CVE-2012-0022 MDVSA-2013:150  View
212855 42171 CVE-2012-0022 http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html  View
212856 42171 CVE-2012-0022 51447  View
212857 42171 CVE-2012-0022 apache-tomcat-parameter-dos(72425)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
25371 JVNDB-2012-001078 Apache Tomcat におけるサービス運用妨害 (CPU 資源の消費) の脆弱性 Apache Tomcat は、パラメーターの処理に非能率なアプローチを使用するため、サービス運用妨害 (CPU 資源の消費) 状態となる脆弱性が存在します。 CVE-2012-0022 53260 CVE-2012-0022 42171 5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001078.html 2012-01-19 2013-01-25 View