NVD

Id
44448  
Name
CVE-2012-2733  
Description
java/org/apache/coyote/http11/InternalNioInputBuffer.java in the HTTP NIO connector in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.28 does not properly restrict the request-header size, which allows remote attackers to cause a denial of service (memory consumption) via a large amount of header data.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2012-11-16  
Modified Date
2016-08-22  
Seq
2012-2733  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
223026 44448 CVE-2012-2733 openSUSE-SU-2012:1700  View
223027 44448 CVE-2012-2733 openSUSE-SU-2012:1701  View
223028 44448 CVE-2012-2733 openSUSE-SU-2013:0147  View
223029 44448 CVE-2012-2733 SSRT101139  View
223030 44448 CVE-2012-2733 HPSBST02955  View
223031 44448 CVE-2012-2733 oval:org.mitre.oval:def:19218  View
223032 44448 CVE-2012-2733 http://svn.apache.org/viewvc?view=revision&revision=1350301  View
223033 44448 CVE-2012-2733 http://svn.apache.org/viewvc?view=revision&revision=1356208  View
223034 44448 CVE-2012-2733 http://tomcat.apache.org/security-6.html  View
223035 44448 CVE-2012-2733 http://tomcat.apache.org/security-7.html  View
223036 44448 CVE-2012-2733 56402  View
223037 44448 CVE-2012-2733 1027729  View
223038 44448 CVE-2012-2733 USN-1637-1  View
223039 44448 CVE-2012-2733 HPSBMU02873  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29667 JVNDB-2012-005374 Apache Tomcat の HTTP NIO コネクタにおけるサービス運用妨害 (メモリ消費) の脆弱性 Apache Tomcat の HTTP NIO コネクタ内の java/org/apache/coyote/http11/InternalNioInputBuffer.java は、リクエストヘッダのサイズを適切に制限しないため、サービス運用妨害 (メモリ消費) 状態となる脆弱性が存在します。 CVE-2012-2733 55971 CVE-2012-2733 44448 5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005374.html 2012-11-05 2015-03-09 View