Düşük PoC var
CVE-2012-4534: Tomcat: güvenlik açığı
Açıklama (NVD)
org/apache/tomcat/util/net/NioEndpoint.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.28, when the NIO connector is used in conjunction with sendfile and HTTPS, allows remote attackers to cause a denial of service (infinite loop) by terminating the connection during the reading of a response.
Özet bilgiler
- Ürün
- Apache Tomcat
- EPSS
- %7,45 (yüzdelik 94)
- CWE
- CWE-399
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| apache-tomcat | 6.0 | 6.0 | — |
| apache-tomcat | 6.0.0 | 6.0.0 | — |
| apache-tomcat | 6.0.0 | 6.0.0 | — |
| apache-tomcat | 6.0.1 | 6.0.1 | — |
| apache-tomcat | 6.0.1 | 6.0.1 | — |
| apache-tomcat | 6.0.2 | 6.0.2 | — |
| apache-tomcat | 6.0.2 | 6.0.2 | — |
| apache-tomcat | 6.0.2 | 6.0.2 | — |
| apache-tomcat | 6.0.3 | 6.0.3 | — |
| apache-tomcat | 6.0.4 | 6.0.4 | — |
| apache-tomcat | 6.0.4 | 6.0.4 | — |
| apache-tomcat | 6.0.5 | 6.0.5 | — |
| apache-tomcat | 6.0.6 | 6.0.6 | — |
| apache-tomcat | 6.0.6 | 6.0.6 | — |
| apache-tomcat | 6.0.7 | 6.0.7 | — |
| apache-tomcat | 6.0.7 | 6.0.7 | — |
| apache-tomcat | 6.0.7 | 6.0.7 | — |
| apache-tomcat | 6.0.8 | 6.0.8 | — |
| apache-tomcat | 6.0.8 | 6.0.8 | — |
| apache-tomcat | 6.0.9 | 6.0.9 | — |
| apache-tomcat | 6.0.9 | 6.0.9 | — |
| apache-tomcat | 6.0.10 | 6.0.10 | — |
| apache-tomcat | 6.0.11 | 6.0.11 | — |
| apache-tomcat | 6.0.12 | 6.0.12 | — |
| apache-tomcat | 6.0.13 | 6.0.13 | — |
| apache-tomcat | 6.0.14 | 6.0.14 | — |
| apache-tomcat | 6.0.15 | 6.0.15 | — |
| apache-tomcat | 6.0.16 | 6.0.16 | — |
| apache-tomcat | 6.0.17 | 6.0.17 | — |
| apache-tomcat | 6.0.18 | 6.0.18 | — |
Kaynaklar
- NVD kaydı
- archives.neohapsis.com
- lists.opensuse.org
- lists.opensuse.org
- lists.opensuse.org
- marc.info
- marc.info
- rhn.redhat.com
- secunia.com
- svn.apache.org
- svn.apache.org
- svn.apache.org
- tomcat.apache.org
- tomcat.apache.org
- www.securityfocus.com
- www.securitytracker.com
- www.ubuntu.com
- h20566.www2.hp.com
- issues.apache.org
- oval.cisecurity.org
- archives.neohapsis.com
- lists.opensuse.org
- lists.opensuse.org
- lists.opensuse.org
- marc.info
- CWE-399