GHSA-cxg2-49rq-8gcr

Source

https://github.com/advisories/GHSA-cxg2-49rq-8gcr

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-cxg2-49rq-8gcr/GHSA-cxg2-49rq-8gcr.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-cxg2-49rq-8gcr

Aliases

CVE-2010-2227

Published

2022-05-14T01:17:03Z

Modified

2024-02-21T23:41:46Z

Summary

Apache Tomcat does not properly handle an invalid Transfer-Encoding header

Details

Apache Tomcat 5.5.0 through 5.5.29, 6.0.0 through 6.0.27, and 7.0.0 beta does not properly handle an invalid Transfer-Encoding header, which allows remote attackers to cause a denial of service (application outage) or obtain sensitive information via a crafted header that interferes with "recycling of a buffer."

Database specific

{
    "cwe_ids":  [
        "CWE-119"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2024-02-21T23:23:28Z",
    "nvd_published_at":  "2010-07-13T17:30:00Z",
    "severity":  "MODERATE"
}

References

Affected packages

Maven / org.apache.tomcat:tomcat

Package

Name: org.apache.tomcat:tomcat; View open source insights on deps.dev
Purl: pkg:maven/org.apache.tomcat/tomcat

Affected ranges

Type: ECOSYSTEM
Events: Introduced

7.0.0

Fixed

7.0.2

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-cxg2-49rq-8gcr/GHSA-cxg2-49rq-8gcr.json"

Maven / org.apache.tomcat:tomcat

Package

Name: org.apache.tomcat:tomcat; View open source insights on deps.dev
Purl: pkg:maven/org.apache.tomcat/tomcat

Affected ranges

Type: ECOSYSTEM
Events: Introduced

5.5.0

Fixed

5.5.30

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-cxg2-49rq-8gcr/GHSA-cxg2-49rq-8gcr.json"

Maven / org.apache.tomcat:tomcat

Package

Name: org.apache.tomcat:tomcat; View open source insights on deps.dev
Purl: pkg:maven/org.apache.tomcat/tomcat

Affected ranges

Type: ECOSYSTEM
Events: Introduced

6.0.0

Fixed

6.0.28

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-cxg2-49rq-8gcr/GHSA-cxg2-49rq-8gcr.json"