CVE-2012-2733

java/org/apache/coyote/http11/InternalNioInputBuffer.java in the HTTP NIO connector in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.28 does not properly…

published November 16, 2012

CVSS
—
EPSS
9%
Percentile
95.1
In the wild
Unconfirmed
What it is

java/org/apache/coyote/http11/InternalNioInputBuffer.java in the HTTP NIO connector in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.28 does not properly restrict the request-header size, which allows remote attackers to cause a denial of service (memory consumption) via a large amount of header data.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08742 · 95.1th percentile
Published
2012-11-16T21:00Z
EPSS history
Timeline
  • 16 NOV 21:00Z
    java/org/apache/coyote/http11/InternalNioInputBuffer.java in the HTTP NIO connector in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.28 does not properly…
    cvelistv5