PT-2012-4222 · Apache+2 · Apache Tomcat+2

Josh Spiewak · Published 2012-10-19 · Updated 2017-09-19 · CVE-2012-2733

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 6.0.0 through 6.0.35 Apache Tomcat versions 7.0.0 through 7.0.27

Description The issue is related to the HTTP NIO connector, where the request-header size is not properly restricted. This allows remote attackers to cause a denial of service by consuming memory via a large amount of header data. The checks that limited the permitted size of request headers were implemented too late in the request parsing process, enabling a malicious user to trigger an OutOfMemoryError by sending a single request with very large headers.

Recommendations For Apache Tomcat versions 6.0.0 through 6.0.35, update to version 6.0.36 or later. For Apache Tomcat versions 7.0.0 through 7.0.27, update to version 7.0.28 or later.

Exploit

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2012-2733

HPSBUX02866

RHSA-2013:0266

SUSE-SU-2013_0226-1

Affected Products

Apache Tomcat

Hp-Ux

Suse

References · 61

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/slowloris.py · Exploit
• 🔥 https://github.com/mpgn/CRIME-poc · Exploit
• http://tomcat.apache.org/security-6.html · Vendor Advisory
• http://marc.info/?l=bugtraq&m=139344343412337&w=2 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2687 · Security Note
• http://tomcat.apache.org/security-7.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4534 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2733 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2012-2733 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3546 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5568 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3499 · Security Note
• https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03748878 · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2012-12/msg00090.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4929 · Security Note