Apache Tomcat 5.5.x before 5.5.35, 6.x before 6.0.34, and 7.x before 7.0.23 uses an inefficient approach for handling parameters, which allows remote attackers to cause a denial of service (CPU consumption) via a request that contains many parameters and parameter values, a different vulnerability than CVE-2011-4858.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apache Tomcat | — | Upgrade Apache Tomcat to 5.5.35Upgrade Apache Tomcat to 7.0.23Upgrade Apache Tomcat to the latest available versionUpgrade Apache Tomcat to 6.0.35 | May 17, 2012 | Jan 19, 2012 |
| Centos_linux | — | Upgrade tomcat5-jsp-2.0-apiUpgrade tomcat5-common-libUpgrade tomcat6-jsp-2.1-apiUpgrade tomcat5-jsp-2.0-api-javadocUpgrade tomcat5-servlet-2.4-api-javadocUpgrade tomcat6-servlet-2.5-apiUpgrade tomcat5-servlet-2.4-apiUpgrade tomcat6-docs-webappUpgrade tomcat5-admin-webappsUpgrade tomcat5-jasper-javadocUpgrade tomcat5-webappsUpgrade tomcat6-libUpgrade tomcat6-webappsUpgrade tomcat6-el-2.1-apiUpgrade tomcat5-server-libUpgrade tomcat6-admin-webappsUpgrade tomcat6-javadocUpgrade tomcat5-jasperUpgrade tomcat5Upgrade tomcat6 | Dec 1, 2016 | Jan 18, 2012 |
| Freebsd | — | Upgrade tomcat | Dec 10, 2025 | Jan 17, 2012 |
| Gentoo Linux | — | Upgrade www-servers/tomcat. | Oct 30, 2017 | Jan 18, 2012 |
| Hpux | — | Update hpuxws22TOMCAT.TOMCAT to the latest version | Aug 11, 2017 | Jan 18, 2012 |
| Oracle Solaris | — | Upgrade web/java-servlet/tomcat to version 6.0.35-0.175.0.4.0.5.0 on Solaris 11.0Upgrade web/java-servlet/tomcat/tomcat-examples to version 6.0.35-0.175.0.4.0.5.0 on Solaris 11.0 | May 29, 2017 | Jan 18, 2012 |
| Oracle_linux | — | Upgrade tomcat5-admin-webappsUpgrade tomcat5-jasper-javadocUpgrade tomcat6-docs-webappUpgrade tomcat6-javadocUpgrade tomcat6-libUpgrade tomcat6-servlet-2.5-apiUpgrade tomcat5Upgrade tomcat5-jasperUpgrade tomcat6-el-2.1-apiUpgrade tomcat5-server-libUpgrade tomcat6-webappsUpgrade tomcat5-servlet-2.4-api-javadocUpgrade tomcat5-webappsUpgrade tomcat6-jsp-2.1-apiUpgrade tomcat5-jsp-2.0-api-javadocUpgrade tomcat6Upgrade tomcat5-common-libUpgrade tomcat5-servlet-2.4-apiUpgrade tomcat6-admin-webappsUpgrade tomcat5-jsp-2.0-api | Oct 16, 2024 | Jan 19, 2012 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Jan 17, 2012 |
| Suse | — | Upgrade tomcat6-docs-webappUpgrade tomcat6-servlet-2_5-apiUpgrade tomcat6-admin-webappsUpgrade tomcat6-libUpgrade tomcat6-javadocUpgrade tomcat6-jsp-2_1-apiUpgrade tomcat6Upgrade tomcat6-webapps | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libtomcat6-java | Nov 8, 2024 | Jan 19, 2012 |
| Vmsa 2012 0005 | — | Upgrade VMware ESX 4.1 to build number 502767Upgrade VMware ESX 4.0 to build number 480973 | Mar 23, 2012 | Jan 18, 2012 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub