CVE-2010-2227

Apache Tomcat 5.5.0 through 5.5.29, 6.0.0 through 6.0.27, and 7.0.0 beta does not properly handle an invalid Transfer-Encoding header, which allows remote attackers to cause a denial of service (application outage) or obtain sensitive information via a crafted header that interferes with "recycling of a buffer."

CVSS v2.0

6.4 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:P

EPSS

54.78% chance of exploitation in the next 30 days, 99th percentile

Published

2010-07-13

Updated

2024-08-07

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/apache_tomcat_transfer…

References

• CVE Record
• NVD entry

Related

• CVE-2010-2204
• CVE-2010-2246
• CVE-2010-2201
• CVE-2010-2254
• CVE-2010-2168
• CVE-2010-2255