vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2012-2733

N/A
Published: November 16, 2012 at 09:00 PM UTC
Updated: June 16, 2026 at 11:41 PM UTC
1 product affected across 1 vendorTomcat

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 9%

Description

java/org/apache/coyote/http11/InternalNioInputBuffer.java in the HTTP NIO connector in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.28 does not properly restrict the request-header size, which allows remote attackers to cause a denial of service (memory consumption) via a large amount of header data.

References (16)

Vendor Advisoryx_refsource_SUSE
Source: [email protected]
http://lists.opensuse.org/opensuse-updates/2012-12/msg00089.html
Vendor Advisoryx_refsource_SUSE
Source: [email protected]
http://lists.opensuse.org/opensuse-updates/2012-12/msg00090.html
Vendor Advisoryx_refsource_SUSE
Source: [email protected]
http://lists.opensuse.org/opensuse-updates/2013-01/msg00037.html
Vendor Advisoryx_refsource_HP
Source: [email protected]
http://marc.info/?l=bugtraq&m=136612293908376&w=2
Vendor Advisoryx_refsource_HP
Source: [email protected]
http://marc.info/?l=bugtraq&m=139344343412337&w=2
Third Party Advisoryx_refsource_SECUNIA
Source: [email protected]
http://secunia.com/advisories/51371
Third Party Advisoryx_refsource_SECUNIA
Source: [email protected]
http://secunia.com/advisories/57126
x_refsource_CONFIRM
Source: [email protected]
http://svn.apache.org/viewvc?view=revision&revision=1350301

CVSS

5MEDIUM[email protected]
Confidentiality
NONE
Integrity
NONE
Availability
PARTIAL
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-20

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card