Lucene search
K

6 matches found

Github Security Blog
Github Security Blog
added 2022/05/02 3:12 a.m.27 views

Apache Tomcat Denial of Service via Malformed Request Headers

Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when the Java AJP connector and modjk load balancing are used, allows remote attackers to cause a denial of service application outage via a crafted request with invalid headers, related to temporary blocking of...

5CVSS6.7AI score0.17506EPSS
Exploits1References46Affected Software1
OSV
OSV
added 2022/05/02 3:12 a.m.32 views

GHSA-5CW4-GGX9-36VG Apache Tomcat Denial of Service via Malformed Request Headers

Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when the Java AJP connector and modjk load balancing are used, allows remote attackers to cause a denial of service application outage via a crafted request with invalid headers, related to temporary blocking of...

5CVSS4.7AI score0.17506EPSS
Exploits1References45
Veracode
Veracode
added 2019/03/25 8:40 a.m.28 views

Denial Of Service (DoS)

Apache Tomcat is vulnerable to denial of service vulnerability. A remote user can send a malicious request with a malformed HTTP Host header via the Java AJP connector to cause the target modjk load balancing worker to be blocked for approximately one minute, resulting in a temporary denial of...

5CVSS4.6AI score0.17506EPSS
Exploits1References52Affected Software4
OpenVAS
OpenVAS
added 2009/06/16 12:0 a.m.121 views

Apache Tomcat Multiple Vulnerabilities (Jun 2009)

Apache Tomcat Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:tomcat";...

5CVSS5.3AI score0.89573EPSS
Exploits7References8
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2009/06/09 12:0 a.m.54 views

JVN#87272440: Apache Tomcat denial of service (DoS) vulnerability

Apache Tomcat from the Apache Software Foundation is an implementation of the Java Servlet and JavaServer Page JSP technologies. If Tomcat receives a request with an invalid header via the Java AJP connector, it will not return an error and instead closes the AJP connection. In case this connecto...

5CVSS4.8AI score0.17506EPSS
Exploits1
UbuntuCve
UbuntuCve
added 2009/06/05 12:0 a.m.36 views

CVE-2009-0033

Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when the Java AJP connector and modjk load balancing are used, allows remote attackers to cause a denial of service application outage via a crafted request with invalid headers, related to temporary blocking of...

5CVSS6.3AI score0.17506EPSS
Exploits1References3
Rows per page
Query Builder