CVE-2012-5568

Apache Tomcat through 7.0.x allows remote attackers to cause a denial of service (daemon outage) via partial HTTP requests, as demonstrated by Slowloris.
References
Link Resource
http://captainholly.wordpress.com/2009/06/19/slowloris-vs-tomcat/ Exploit Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2012-12/msg00089.html Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2012-12/msg00090.html Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2013-01/msg00037.html Mailing List Third Party Advisory
http://openwall.com/lists/oss-security/2012/11/26/2 Mailing List Third Party Advisory
http://tomcat.10.n6.nabble.com/How-does-Tomcat-handle-a-slow-HTTP-DoS-tc2147776.html Vendor Advisory
http://tomcat.10.n6.nabble.com/How-does-Tomcat-handle-a-slow-HTTP-DoS-tc2147779.html Vendor Advisory
http://www.securityfocus.com/bid/56686 Third Party Advisory VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=880011 Issue Tracking Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/80317 Third Party Advisory VDB Entry
http://captainholly.wordpress.com/2009/06/19/slowloris-vs-tomcat/ Exploit Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2012-12/msg00089.html Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2012-12/msg00090.html Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2013-01/msg00037.html Mailing List Third Party Advisory
http://openwall.com/lists/oss-security/2012/11/26/2 Mailing List Third Party Advisory
http://tomcat.10.n6.nabble.com/How-does-Tomcat-handle-a-slow-HTTP-DoS-tc2147776.html Vendor Advisory
http://tomcat.10.n6.nabble.com/How-does-Tomcat-handle-a-slow-HTTP-DoS-tc2147779.html Vendor Advisory
http://www.securityfocus.com/bid/56686 Third Party Advisory VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=880011 Issue Tracking Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/80317 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:opensuse:12.1:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:opensuse:12.2:*:*:*:*:*:*:*

History

21 Nov 2024, 01:44

Type Values Removed Values Added
References () http://captainholly.wordpress.com/2009/06/19/slowloris-vs-tomcat/ - Exploit, Third Party Advisory () http://captainholly.wordpress.com/2009/06/19/slowloris-vs-tomcat/ - Exploit, Third Party Advisory
References () http://lists.opensuse.org/opensuse-updates/2012-12/msg00089.html - Mailing List, Third Party Advisory () http://lists.opensuse.org/opensuse-updates/2012-12/msg00089.html - Mailing List, Third Party Advisory
References () http://lists.opensuse.org/opensuse-updates/2012-12/msg00090.html - Mailing List, Third Party Advisory () http://lists.opensuse.org/opensuse-updates/2012-12/msg00090.html - Mailing List, Third Party Advisory
References () http://lists.opensuse.org/opensuse-updates/2013-01/msg00037.html - Mailing List, Third Party Advisory () http://lists.opensuse.org/opensuse-updates/2013-01/msg00037.html - Mailing List, Third Party Advisory
References () http://openwall.com/lists/oss-security/2012/11/26/2 - Mailing List, Third Party Advisory () http://openwall.com/lists/oss-security/2012/11/26/2 - Mailing List, Third Party Advisory
References () http://tomcat.10.n6.nabble.com/How-does-Tomcat-handle-a-slow-HTTP-DoS-tc2147776.html - Vendor Advisory () http://tomcat.10.n6.nabble.com/How-does-Tomcat-handle-a-slow-HTTP-DoS-tc2147776.html - Vendor Advisory
References () http://tomcat.10.n6.nabble.com/How-does-Tomcat-handle-a-slow-HTTP-DoS-tc2147779.html - Vendor Advisory () http://tomcat.10.n6.nabble.com/How-does-Tomcat-handle-a-slow-HTTP-DoS-tc2147779.html - Vendor Advisory
References () http://www.securityfocus.com/bid/56686 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/56686 - Third Party Advisory, VDB Entry
References () https://bugzilla.redhat.com/show_bug.cgi?id=880011 - Issue Tracking, Third Party Advisory () https://bugzilla.redhat.com/show_bug.cgi?id=880011 - Issue Tracking, Third Party Advisory
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/80317 - Third Party Advisory, VDB Entry () https://exchange.xforce.ibmcloud.com/vulnerabilities/80317 - Third Party Advisory, VDB Entry

Information

Published : 2012-11-30 19:55

Updated : 2024-11-21 01:44


NVD link : CVE-2012-5568

Mitre link : CVE-2012-5568

CVE.ORG link : CVE-2012-5568


JSON object : View

Products Affected

opensuse

  • opensuse

apache

  • tomcat