PT-2011-2428 · Apache+1 · Apache Tomcat+1

Published 2011-02-03 · Updated 2022-05-14 · CVE-2011-0534

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 6.0.0 through 6.0.30 Apache Tomcat versions 7.0.0 through 7.0.6

Description The issue allows remote attackers to cause a denial of service (OutOfMemoryError) via a crafted request, due to the NIO HTTP connector not enforcing the maxHttpHeaderSize limit for requests. The NIO connector expands its buffer endlessly during request line processing, which can be used for a denial of service attack.

Recommendations For Apache Tomcat versions 6.0.0 through 6.0.30, consider updating to a version that enforces the maxHttpHeaderSize limit to prevent denial of service attacks. For Apache Tomcat versions 7.0.0 through 7.0.6, consider updating to a version that enforces the maxHttpHeaderSize limit to prevent denial of service attacks. As a temporary workaround, consider restricting the size of HTTP headers to minimize the risk of exploitation.

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2011-0534

DSA-2160-1

GHSA-43V2-6GRP-9PP9

RHSA-2011:0335

RHSA-2011:0348

RHSA-2011_0335

Affected Products

Apache Tomcat

Red Hat

References · 35

• https://linux.oracle.com/errata/ELSA-2011-0335.html · Vendor Advisory
• http://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.32 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html · Vendor Advisory
• http://debian.org/security/2011/dsa-2160 · Vendor Advisory
• http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-43v2-6grp-9pp9 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-0534 · Security Note
• http://marc.info/?l=bugtraq&m=139344343412337&w=2 · Vendor Advisory
• http://vupen.com/english/advisories/2011/0293 · Vendor Advisory
• https://github.com/apache/tomcat · Note
• https://github.com/apache/tomcat/commit/008447095ce8c3a8f713093d5e618f3f06f94ea8 · Note
• https://web.archive.org/web/20121212040149/http://securitytracker.com/id?1025027 · Note
• http://securityfocus.com/bid/46164 · Note
• http://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.8_%28released_5_Feb_2011%29 · Note
• http://secunia.com/advisories/57126 · Note