GHSA-pqr5-9v2j-44xg
Suggest an improvement- Source
- https://github.com/advisories/GHSA-pqr5-9v2j-44xg
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/04/GHSA-pqr5-9v2j-44xg/GHSA-pqr5-9v2j-44xg.json
- JSON Data
- https://api.osv.dev/v1/vulns/GHSA-pqr5-9v2j-44xg
- Aliases
-
- CVE-2002-2272
- Published
- 2022-04-30T18:22:50Z
- Modified
- 2024-02-12T20:42:12.965625Z
- Summary
- Apache Tomcat DoS via Malicious Get Request
- Details
-
Tomcat 4.0 through 4.1.12, using mod_jk 1.2.1 module on Apache 1.3 through 1.3.27, allows remote attackers to cause a denial of service (desynchronized communications) via an HTTP GET request with a Transfer-Encoding chunked field with invalid values.
- Database specific
{ "nvd_published_at": "2002-12-31T05:00:00Z", "cwe_ids": [ "CWE-119" ], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2024-02-12T20:23:12Z" }- References
Affected packages
Maven / org.apache.tomcat:tomcat
Package
- Name
- org.apache.tomcat:tomcat
- View open source insights on deps.dev
- Purl
- pkg:maven/org.apache.tomcat/tomcat