NVD

Id
45910  
Name
CVE-2012-4534  
Description
org/apache/tomcat/util/net/NioEndpoint.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.28, when the NIO connector is used in conjunction with sendfile and HTTPS, allows remote attackers to cause a denial of service (infinite loop) by terminating the connection during the reading of a response.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:N/A:P)  
Pub Date
2017-05-27  
Published
2012-12-19  
Modified Date
2017-05-22  
Seq
2012-4534  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
230563 45910 CVE-2012-4534 20121204 CVE-2012-4534 Apache Tomcat denial of service  View
230564 45910 CVE-2012-4534 openSUSE-SU-2013:0161  View
230565 45910 CVE-2012-4534 openSUSE-SU-2013:0170  View
230566 45910 CVE-2012-4534 openSUSE-SU-2013:0192  View
230567 45910 CVE-2012-4534 SSRT101139  View
230568 45910 CVE-2012-4534 HPSBST02955  View
230569 45910 CVE-2012-4534 oval:org.mitre.oval:def:19398  View
230570 45910 CVE-2012-4534 RHSA-2013:0623  View
230571 45910 CVE-2012-4534 http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/java/org/apache/tomcat/util/net/NioEndpoint.java?r1=1340218&r2=1340217&pathrev=1340218  View
230572 45910 CVE-2012-4534 http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/webapps/docs/changelog.xml?r1=1340218&r2=1340217&pathrev=1340218  View
230573 45910 CVE-2012-4534 http://svn.apache.org/viewvc?view=revision&revision=1340218  View
230574 45910 CVE-2012-4534 http://tomcat.apache.org/security-6.html  View
230575 45910 CVE-2012-4534 http://tomcat.apache.org/security-7.html  View
230576 45910 CVE-2012-4534 1027836  View
230577 45910 CVE-2012-4534 USN-1685-1  View
230578 45910 CVE-2012-4534 HPSBMU02873  View
230579 45910 CVE-2012-4534 https://issues.apache.org/bugzilla/show_bug.cgi?id=52858  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30044 JVNDB-2012-005751 Apache Tomcat におけるサービス運用妨害 (無限ループ) の脆弱性 Apache Tomcat の org/apache/tomcat/util/net/NioEndpoint.java には、NIO コネクタが sendfile と HTTPS との組み合わせで使用される場合、サービス運用妨害 (無限ループ) 状態となる脆弱性が存在します。 CVE-2012-4534 57772 CVE-2012-4534 45910 2.6 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005751.html 2012-12-04 2015-03-09 View