CVE-2012-0022
N/A
Published: January 19, 2012 at 02:00 AM UTC
Updated: June 16, 2026 at 11:36 PM UTC
1 product affected across 1 vendorTomcat
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 10%
Description
Apache Tomcat 5.5.x before 5.5.35, 6.x before 6.0.34, and 7.x before 7.0.23 uses an inefficient approach for handling parameters, which allows remote attackers to cause a denial of service (CPU consumption) via a request that contains many parameters and parameter values, a different vulnerability than CVE-2011-4858.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
5.5.05.5.15.5.105.5.115.5.125.5.135.5.145.5.155.5.165.5.175.5.185.5.195.5.25.5.205.5.215.5.225.5.235.5.245.5.255.5.265.5.275.5.285.5.295.5.35.5.305.5.315.5.325.5.335.5.345.5.45.5.55.5.65.5.75.5.85.5.96.06.0.06.0.16.0.106.0.116.0.126.0.136.0.146.0.156.0.166.0.176.0.186.0.196.0.26.0.206.0.246.0.266.0.276.0.286.0.296.0.36.0.306.0.316.0.326.0.336.0.46.0.56.0.66.0.76.0.86.0.97.0.07.0.0 beta7.0.17.0.107.0.117.0.127.0.137.0.147.0.157.0.167.0.177.0.187.0.197.0.27.0.207.0.217.0.227.0.37.0.47.0.57.0.67.0.77.0.87.0.9
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (32)
Mailing Listx_refsource_BUGTRAQ
Source: [email protected]
http://archives.neohapsis.com/archives/bugtraq/2012-01/0112.htmlVendor Advisoryx_refsource_HP
Source: [email protected]
http://marc.info/?l=bugtraq&m=132871655717248&w=2Vendor Advisoryx_refsource_HP
Source: [email protected]
http://marc.info/?l=bugtraq&m=133294394108746&w=2Vendor Advisoryx_refsource_HP
Source: [email protected]
http://marc.info/?l=bugtraq&m=136485229118404&w=2Vendor Advisoryx_refsource_REDHAT
Source: [email protected]
http://rhn.redhat.com/errata/RHSA-2012-0074.htmlVendor Advisoryx_refsource_REDHAT
Source: [email protected]
http://rhn.redhat.com/errata/RHSA-2012-0075.htmlVendor Advisoryx_refsource_REDHAT
Source: [email protected]
http://rhn.redhat.com/errata/RHSA-2012-0076.htmlVendor Advisoryx_refsource_REDHAT
Source: [email protected]
http://rhn.redhat.com/errata/RHSA-2012-0077.htmlQuick Info
StatusMODIFIED
CWE
CWE-189
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card