PT-2011-2428 · Apache+1 · Apache Tomcat+1

Publicado 2011-02-03 · Atualizado 2022-05-14 · CVE-2011-0534

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 6.0.0 through 6.0.30 Apache Tomcat versions 7.0.0 through 7.0.6

Description The issue allows remote attackers to cause a denial of service (OutOfMemoryError) via a crafted request, due to the NIO HTTP connector not enforcing the maxHttpHeaderSize limit for requests. The NIO connector expands its buffer endlessly during request line processing, which can be used for a denial of service attack.

Recommendations For Apache Tomcat versions 6.0.0 through 6.0.30, consider updating to a version that enforces the maxHttpHeaderSize limit to prevent denial of service attacks. For Apache Tomcat versions 7.0.0 through 7.0.6, consider updating to a version that enforces the maxHttpHeaderSize limit to prevent denial of service attacks. As a temporary workaround, consider restricting the size of HTTP headers to minimize the risk of exploitation.

Correção

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2011-0534

DSA-2160-1

GHSA-43V2-6GRP-9PP9

RHSA-2011:0335

RHSA-2011:0348

RHSA-2011_0335

Produtos afetados

Apache Tomcat

Red Hat

Referências · 35

• https://github.com/apache/tomcat · Nota
• https://github.com/apache/tomcat/commit/008447095ce8c3a8f713093d5e618f3f06f94ea8 · Nota
• https://web.archive.org/web/20121212040149/http://securitytracker.com/id?1025027 · Nota
• http://securityfocus.com/bid/46164 · Nota
• https://linux.oracle.com/errata/ELSA-2011-0335.html · Aviso do Fabricante
• http://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.32 · Aviso do Fabricante
• http://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.8_%28released_5_Feb_2011%29 · Nota
• http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html · Aviso do Fabricante
• http://debian.org/security/2011/dsa-2160 · Aviso do Fabricante
• http://secunia.com/advisories/57126 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65162 · Nota
• http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html · Aviso do Fabricante
• https://web.archive.org/web/20110801035315/http://secunia.com/advisories/45022 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0534 · Nota
• http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5098550.html · Nota