Lucene search

K
ubuntucveUbuntu.comUB:CVE-2011-4858
HistoryJan 05, 2012 - 12:00 a.m.

CVE-2011-4858

2012-01-0500:00:00
ubuntu.com
ubuntu.com
9

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.651 Medium

EPSS

Percentile

97.8%

Apache Tomcat before 5.5.35, 6.x before 6.0.35, and 7.x before 7.0.23
computes hash values for form parameters without restricting the ability to
trigger hash collisions predictably, which allows remote attackers to cause
a denial of service (CPU consumption) by sending many crafted parameters.

Bugs

Notes

Author Note
mdeslaur CVE-2011-4084 was rejected as a dupe of this one fixes overlap with CVE-2012-0022 fixes
OSVersionArchitecturePackageVersionFilename
ubuntu11.10noarchtomcat7< 7.0.21-1ubuntu0.1UNKNOWN
ubuntu10.04noarchtomcat6< 6.0.24-2ubuntu1.10UNKNOWN
ubuntu10.10noarchtomcat6< 6.0.28-2ubuntu1.6UNKNOWN
ubuntu11.04noarchtomcat6< 6.0.28-10ubuntu2.3UNKNOWN
ubuntu11.10noarchtomcat6< 6.0.32-5ubuntu1.2UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.651 Medium

EPSS

Percentile

97.8%

Related for UB:CVE-2011-4858