NVD

Id
7594  
Name
CVE-2011-0534  
Description
Apache Tomcat 7.0.0 through 7.0.6 and 6.0.0 through 6.0.30 does not enforce the maxHttpHeaderSize limit for requests involving the NIO HTTP connector, which allows remote attackers to cause a denial of service (OutOfMemoryError) via a crafted request.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2011-02-10  
Modified Date
2014-03-16  
Seq
2011-0534  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
42846 7594 CVE-2011-0534 APPLE-SA-2011-10-12-3  View
42847 7594 CVE-2011-0534 SUSE-SR:2011:005  View
42848 7594 CVE-2011-0534 HPSBST02955  View
42849 7594 CVE-2011-0534 8074  View
42850 7594 CVE-2011-0534 http://support.apple.com/kb/HT5002  View
42851 7594 CVE-2011-0534 http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5098550.html  View
42852 7594 CVE-2011-0534 http://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.32  View
42853 7594 CVE-2011-0534 http://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.8_(released_5_Feb_2011)  View
42854 7594 CVE-2011-0534 DSA-2160  View
42855 7594 CVE-2011-0534 20110205 [SECURITY] CVE-2011-0534 Apache Tomcat DoS vulnerability  View
42856 7594 CVE-2011-0534 46164  View
42857 7594 CVE-2011-0534 1025027  View
42858 7594 CVE-2011-0534 ADV-2011-0293  View
42859 7594 CVE-2011-0534 tomcat-nio-connector-dos(65162)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30909 JVNDB-2011-001148 Apache Tomcat におけるサービス運用妨害 (DoS) の脆弱性 Apache Tomcat は、NIO HTTP コネクタを含むリクエストに対し maxHttpHeaderSize 制限を適用しないため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2011-0534 48441 CVE-2011-0534 7594 5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001148.html 2011-01-27 2015-03-26 View