The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
java/org/apache/coyote/http11/InternalNioInputBuffer.java in the HTTP NIO connector in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.28 does not properly restrict the request-header size, which allows remote attackers to cause a denial of service (memory consumption) via a large amount of header data.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apache Tomcat | — | Upgrade Apache Tomcat to 7.0.28Upgrade Apache Tomcat to 6.0.36Upgrade Apache Tomcat to the latest available version | Nov 16, 2012 | Nov 16, 2012 |
| Freebsd | — | Upgrade tomcat | Dec 10, 2025 | Nov 8, 2012 |
| Gentoo Linux | — | Upgrade www-servers/tomcat. | Oct 30, 2017 | Nov 16, 2012 |
| Hpux | — | Update hpuxws22APCH32.MOD_JK to the latest versionUpdate hpuxws22APCH32.MOD_JK2 to the latest versionUpdate hpuxws22APCH32.AUTH_LDAP2 to the latest versionUpdate hpuxws22APCH32.AUTH_LDAP to the latest versionUpdate hpuxws22APCH32.MOD_PERL to the latest versionUpdate hpuxws22APCH32.APACHE2 to the latest versionUpdate hpuxws22APCH32.APACHE to the latest versionUpdate hpuxws22APCH32.WEBPROXY2 to the latest versionUpdate hpuxws22APCH32.PHP2 to the latest versionUpdate hpuxws22APCH32.MOD_PERL2 to the latest versionUpdate hpuxws22APCH32.PHP to the latest versionUpdate hpuxws22APCH32.WEBPROXY to the latest versionUpdate hpuxws22TOMCAT.TOMCAT to the latest version | Aug 11, 2017 | Nov 16, 2012 |
| Oracle Solaris | — | Upgrade web/java-servlet/tomcat to version 6.0.36-0.175.1.4.0.4.0 on Solaris 11.1Upgrade web/java-servlet/tomcat/tomcat-examples to version 6.0.36-0.175.1.4.0.4.0 on Solaris 11.1 | May 29, 2017 | Nov 16, 2012 |
| Suse | — | Upgrade tomcat6-admin-webappsUpgrade tomcat6-jsp-2_1-apiUpgrade tomcat6-docs-webappUpgrade tomcat6-servlet-2_5-apiUpgrade tomcat6-javadocUpgrade tomcat6Upgrade tomcat6-webappsUpgrade tomcat6-lib | Jul 17, 2014 | Jul 17, 2014 |
| Ubuntu | — | Upgrade libtomcat6-java | Nov 8, 2024 | Nov 16, 2012 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub