CVE-2010-2227 Apache Tomcat does not properly handle an invalid Transfer-Encoding header
MediumCVSS 6.4
EPSS 54.8%
Framework module
- Published
- Updated
- Exploit status
- Public exploit available
Description
Apache Tomcat 5.5.0 through 5.5.29, 6.0.0 through 6.0.27, and 7.0.0 beta does not properly handle an invalid Transfer-Encoding header, which allows remote attackers to cause a denial of service (application outage) or obtain sensitive information via a crafted header that interferes with "recycling of a buffer."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| org.apache.tomcat/tomcat(Maven) | >= 7.0.0, < 7.0.2 | 7.0.2 |
| org.apache.tomcat/tomcat(Maven) | >= 5.5.0, < 5.5.30 | 5.5.30 |
| org.apache.tomcat/tomcat(Maven) | >= 6.0.0, < 6.0.28 | 6.0.28 |
| apache tomcat | = 5.5.0 | No fix listed |
| apache tomcat | = 5.5.1 | No fix listed |
| apache tomcat | = 5.5.2 | No fix listed |
| apache tomcat | = 5.5.3 | No fix listed |
| apache tomcat | = 5.5.4 | No fix listed |
| apache tomcat | = 5.5.5 | No fix listed |
| apache tomcat | = 5.5.6 | No fix listed |
| apache tomcat | = 5.5.7 | No fix listed |
| apache tomcat | = 5.5.8 | No fix listed |
| apache tomcat | = 5.5.9 | No fix listed |
| apache tomcat | = 5.5.10 | No fix listed |
| apache tomcat | = 5.5.11 | No fix listed |
| apache tomcat | = 5.5.12 | No fix listed |
| apache tomcat | = 5.5.13 | No fix listed |
| apache tomcat | = 5.5.14 | No fix listed |
| apache tomcat | = 5.5.15 | No fix listed |
| apache tomcat | = 5.5.16 | No fix listed |
| apache tomcat | = 5.5.17 | No fix listed |
| apache tomcat | = 5.5.18 | No fix listed |
| apache tomcat | = 5.5.19 | No fix listed |
| apache tomcat | = 5.5.20 | No fix listed |
| apache tomcat | = 5.5.21 | No fix listed |
Show 33 more
| Product | Affected versions | Fixed in |
|---|---|---|
| apache tomcat | = 5.5.22 | No fix listed |
| apache tomcat | = 5.5.23 | No fix listed |
| apache tomcat | = 5.5.24 | No fix listed |
| apache tomcat | = 5.5.25 | No fix listed |
| apache tomcat | = 5.5.26 | No fix listed |
| apache tomcat | = 5.5.27 | No fix listed |
| apache tomcat | = 5.5.28 | No fix listed |
| apache tomcat | = 5.5.29 | No fix listed |
| apache tomcat | = 6.0.0 | No fix listed |
| apache tomcat | = 6.0.1 | No fix listed |
| apache tomcat | = 6.0.2 | No fix listed |
| apache tomcat | = 6.0.3 | No fix listed |
| apache tomcat | = 6.0.4 | No fix listed |
| apache tomcat | = 6.0.5 | No fix listed |
| apache tomcat | = 6.0.6 | No fix listed |
| apache tomcat | = 6.0.7 | No fix listed |
| apache tomcat | = 6.0.8 | No fix listed |
| apache tomcat | = 6.0.9 | No fix listed |
| apache tomcat | = 6.0.10 | No fix listed |
| apache tomcat | = 6.0.11 | No fix listed |
| apache tomcat | = 6.0.12 | No fix listed |
| apache tomcat | = 6.0.13 | No fix listed |
| apache tomcat | = 6.0.14 | No fix listed |
| apache tomcat | = 6.0.15 | No fix listed |
| apache tomcat | = 6.0.16 | No fix listed |
| apache tomcat | = 6.0.17 | No fix listed |
| apache tomcat | = 6.0.18 | No fix listed |
| apache tomcat | = 6.0.19 | No fix listed |
| apache tomcat | = 6.0.20 | No fix listed |
| apache tomcat | = 6.0.24 | No fix listed |
| apache tomcat | = 6.0.26 | No fix listed |
| apache tomcat | = 6.0.27 | No fix listed |
| apache tomcat | = 7.0.0-beta | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com patch
- github.com patch
- web.archive.org
- web.archive.org
- web.archive.org
- web.archive.org
- web.archive.org
- web.archive.org
- web.archive.org
- web.archive.org
- web.archive.org
- web.archive.org
- web.archive.org
- web.archive.org
- oval:org.mitre.oval:def:18532 signature vdb-entry
- lists.apache.org
- lists.apache.org
- lists.apache.org
- lists.apache.org
- github.com product
- tomcat-transferencoding-dos(60264) vdb-entry
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- geronimo.apache.org
- geronimo.apache.org
- APPLE-SA-2011-10-12-3 vendor-advisory
- FEDORA-2010-16248 vendor-advisory
- FEDORA-2010-16270 vendor-advisory
- SUSE-SR:2010:017 vendor-advisory
- HPSBUX02579 vendor-advisory
- HPSBUX02860 vendor-advisory
- HPSBST02955 vendor-advisory
- support.apple.com
- svn.apache.org patch
- svn.apache.org patch
- svn.apache.org patch
- tomcat.apache.org vendor-advisory
- tomcat.apache.org vendor-advisory
- tomcat.apache.org vendor-advisory
- DSA-2207 vendor-advisory
- MDVSA-2010:176 vendor-advisory
- MDVSA-2010:177 vendor-advisory
- www.novell.com
- www.novell.com
- www.vmware.com
- www.vmware.com
- github.com
- 40813 third-party-advisory
- 41025 third-party-advisory
- 42079 third-party-advisory
- 42368 third-party-advisory
- 42454 third-party-advisory
- 43310 third-party-advisory
- 44183 third-party-advisory
- 57126 third-party-advisory
- 1024180 vdb-entry
- RHSA-2010:0580 vendor-advisory
- RHSA-2010:0581 vendor-advisory
- RHSA-2010:0582 vendor-advisory
- RHSA-2010:0583 vendor-advisory
- 20100709 [SECURITY] CVE-2010-2227: Apache Tomcat Remote Denial Of Service and Information Disclosure Vulnerability mailing-list
- 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX mailing-list
- 41544 vdb-entry
- ADV-2010-1986 vdb-entry
- ADV-2010-2868 vdb-entry
- ADV-2010-3056 vdb-entry
- [tomcat-dev] 20190319 svn commit: r1855831 [22/30] - in /tomcat/site/trunk: ./ docs/ xdocs/ mailing-list
- [tomcat-dev] 20190325 svn commit: r1856174 [20/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/ mailing-list
- [tomcat-dev] 20200213 svn commit: r1873980 [25/34] - /tomcat/site/trunk/docs/ mailing-list
- [tomcat-dev] 20200203 svn commit: r1873527 [22/30] - /tomcat/site/trunk/docs/ mailing-list