GHSA-pqr5-9v2j-44xg

Source

https://github.com/advisories/GHSA-pqr5-9v2j-44xg

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/04/GHSA-pqr5-9v2j-44xg/GHSA-pqr5-9v2j-44xg.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-pqr5-9v2j-44xg

Aliases

CVE-2002-2272

Published

2022-04-30T18:22:50Z

Modified

2024-02-12T20:42:12Z

Summary

Apache Tomcat DoS via Malicious Get Request

Details

Tomcat 4.0 through 4.1.12, using mod_jk 1.2.1 module on Apache 1.3 through 1.3.27, allows remote attackers to cause a denial of service (desynchronized communications) via an HTTP GET request with a Transfer-Encoding chunked field with invalid values.

Database specific

{
    "cwe_ids":  [
        "CWE-119"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2024-02-12T20:23:12Z",
    "nvd_published_at":  "2002-12-31T05:00:00Z",
    "severity":  "HIGH"
}

References

Affected packages

Maven / org.apache.tomcat:tomcat

Package

Name: org.apache.tomcat:tomcat; View open source insights on deps.dev
Purl: pkg:maven/org.apache.tomcat/tomcat

Affected ranges

Type: ECOSYSTEM
Events: Introduced

4.0.0

Last Affected

4.1.12

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/04/GHSA-pqr5-9v2j-44xg/GHSA-pqr5-9v2j-44xg.json"