Lucene search

K
osvGoogleOSV:GHSA-PQR5-9V2J-44XG
HistoryApr 30, 2022 - 6:22 p.m.

Apache Tomcat DoS via Malicious Get Request

2022-04-3018:22:50
Google
osv.dev
7
apache
tomcat
denial of service
malicious
get request
remote attack
transfer-encoding
chunked field
invalid values
mod_jk
apache 1.3.

AI Score

7

Confidence

High

EPSS

0.015

Percentile

87.3%

Tomcat 4.0 through 4.1.12, using mod_jk 1.2.1 module on Apache 1.3 through 1.3.27, allows remote attackers to cause a denial of service (desynchronized communications) via an HTTP GET request with a Transfer-Encoding chunked field with invalid values.

AI Score

7

Confidence

High

EPSS

0.015

Percentile

87.3%

Related for OSV:GHSA-PQR5-9V2J-44XG