CVE-2010-2227
MEDIUM 6.4EPSS 54.8%
Apache Tomcat 5.5.0 through 5.5.29, 6.0.0 through 6.0.27, and 7.0.0 beta does not properly handle an invalid Transfer-Encoding header, which allows remote attackers to cause a denial of service (application outage) or obtain sensitive information via a crafted header that interferes with "recycling of a buffer."
- CVSS v2.0 NVD
- 6.4 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:P - EPSS
- 54.78% chance of exploitation in the next 30 days, 99th percentile
- Published
- 2010-07-13
- Updated
- 2024-08-07
Metasploit modules (1)
Security advisories
- http://tomcat.apache.org/security-5.html
- http://tomcat.apache.org/security-6.html
- http://tomcat.apache.org/security-7.html
- advisories/GHSA-cxg2-49rq-8gcr
- http://svn.apache.org/viewvc?view=revision&revision=958911
- http://svn.apache.org/viewvc?view=revision&revision=958977
- http://svn.apache.org/viewvc?view=revision&revision=959428
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:176
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:177
- http://www.redhat.com/support/errata/RHSA-2010-0580.html
- http://www.redhat.com/support/errata/RHSA-2010-0581.html
- http://www.redhat.com/support/errata/RHSA-2010-0582.html
- http://www.redhat.com/support/errata/RHSA-2010-0583.html
- http://www.securityfocus.com/bid/41544
- http://www.vmware.com/security/advisories/VMSA-2011-0003.html