CVE-2011-4858 Improper Input Validation in Apache Tomcat
MediumCVSS 5.0
EPSS 79.7%
Framework module
Public exploit
PoC
- Published
- Updated
- Exploit status
- Public exploit available
Description
Apache Tomcat before 5.5.35, 6.x before 6.0.35, and 7.x before 7.0.23 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| org.apache.tomcat/tomcat(Maven) | >= 5.5.0, < 5.5.35 | 5.5.35 |
| org.apache.tomcat/tomcat(Maven) | >= 6.0.0, < 6.0.35 | 6.0.35 |
| org.apache.tomcat/tomcat(Maven) | >= 7.0.0, < 7.0.23 | 7.0.23 |
| apache tomcat | = 5.5.35 | No fix listed |
| apache tomcat | = 6.0.0 | No fix listed |
| apache tomcat | = 6.0.1 | No fix listed |
| apache tomcat | = 6.0.2 | No fix listed |
| apache tomcat | = 6.0.3 | No fix listed |
| apache tomcat | = 6.0.4 | No fix listed |
| apache tomcat | = 6.0.5 | No fix listed |
| apache tomcat | = 6.0.6 | No fix listed |
| apache tomcat | = 6.0.7 | No fix listed |
| apache tomcat | = 6.0.8 | No fix listed |
| apache tomcat | = 6.0.9 | No fix listed |
| apache tomcat | = 6.0.10 | No fix listed |
| apache tomcat | = 6.0.11 | No fix listed |
| apache tomcat | = 6.0.12 | No fix listed |
| apache tomcat | = 6.0.13 | No fix listed |
| apache tomcat | = 6.0.14 | No fix listed |
| apache tomcat | = 6.0.15 | No fix listed |
| apache tomcat | = 6.0.16 | No fix listed |
| apache tomcat | = 6.0.17 | No fix listed |
| apache tomcat | = 6.0.18 | No fix listed |
| apache tomcat | = 6.0.19 | No fix listed |
| apache tomcat | = 6.0.20 | No fix listed |
Show 37 more
| Product | Affected versions | Fixed in |
|---|---|---|
| apache tomcat | = 6.0.21 | No fix listed |
| apache tomcat | = 6.0.22 | No fix listed |
| apache tomcat | = 6.0.23 | No fix listed |
| apache tomcat | = 6.0.24 | No fix listed |
| apache tomcat | = 6.0.25 | No fix listed |
| apache tomcat | = 6.0.26 | No fix listed |
| apache tomcat | = 6.0.27 | No fix listed |
| apache tomcat | = 6.0.28 | No fix listed |
| apache tomcat | = 6.0.29 | No fix listed |
| apache tomcat | = 6.0.30 | No fix listed |
| apache tomcat | = 6.0.31 | No fix listed |
| apache tomcat | = 6.0.32 | No fix listed |
| apache tomcat | = 6.0.33 | No fix listed |
| apache tomcat | = 6.0.34 | No fix listed |
| apache tomcat | = 7.0.0 | No fix listed |
| apache tomcat | = 7.0.1 | No fix listed |
| apache tomcat | = 7.0.2 | No fix listed |
| apache tomcat | = 7.0.3 | No fix listed |
| apache tomcat | = 7.0.4 | No fix listed |
| apache tomcat | = 7.0.5 | No fix listed |
| apache tomcat | = 7.0.6 | No fix listed |
| apache tomcat | = 7.0.7 | No fix listed |
| apache tomcat | = 7.0.8 | No fix listed |
| apache tomcat | = 7.0.9 | No fix listed |
| apache tomcat | = 7.0.10 | No fix listed |
| apache tomcat | = 7.0.11 | No fix listed |
| apache tomcat | = 7.0.12 | No fix listed |
| apache tomcat | = 7.0.13 | No fix listed |
| apache tomcat | = 7.0.14 | No fix listed |
| apache tomcat | = 7.0.15 | No fix listed |
| apache tomcat | = 7.0.16 | No fix listed |
| apache tomcat | = 7.0.17 | No fix listed |
| apache tomcat | = 7.0.18 | No fix listed |
| apache tomcat | = 7.0.19 | No fix listed |
| apache tomcat | = 7.0.20 | No fix listed |
| apache tomcat | = 7.0.21 | No fix listed |
| apache tomcat | = 7.0.22 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- bugzilla.redhat.com
- github.com exploit
- oval:org.mitre.oval:def:18886 signature vdb-entry
- mail-archives.apache.org
- SSRT100728 vendor-advisory
- SSRT100771 vendor-advisory
- HPSBUX02860 vendor-advisory
- RHSA-2012:0074 vendor-advisory
- RHSA-2012:0075 vendor-advisory
- RHSA-2012:0076 vendor-advisory
- tomcat.apache.org
- DSA-2401 vendor-advisory
- VU#903934 third-party-advisory us-government-resource
- www.nruns.com
- www.ocert.org
- github.com
- github.com product
- [announce] 20111228 [SECURITY] Apache Tomcat and the hashtable collision DoS vulnerability mailing-list
- RHSA-2012:0077 vendor-advisory
- RHSA-2012:0078 vendor-advisory
- RHSA-2012:0089 vendor-advisory
- RHSA-2012:0325 vendor-advisory
- RHSA-2012:0406 vendor-advisory
- 48549 third-party-advisory
- 48790 third-party-advisory
- 48791 third-party-advisory
- 54971 third-party-advisory
- 55115 third-party-advisory
- 51200 vdb-entry