Out-of-bounds read In org.apache.tomcat:tomcat
Description
Integer Overflow or Wraparound in Apache Tomcat Integer overflow in the parseChunkHeader function in java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 allows remote attackers to cause a denial of service (resource consumption) via a malformed chunk size in chunked transfer coding of a request during the streaming of data.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 maven | 6.0.40, 7.0.53, 8.0.4 | ||
maven | 6.0.40, 7.0.53, 8.0.4 | ||
 rpm rhel5 | - | - | |
rpm rhel6 | 0:6.0.24-72.el6_5 | ||
rpm rhel7 | 0:7.0.42-6.el7_0 |
Aliases
1. 2. 3. 4.
References
1. 2. 3. 4. 5. 6. 7. 8. 9. 10. 11. 12. 13. 14. 15. 16. 17. 18. 19. 20. 21. 22. 23. 24. 25. 26. 27. 28. 29. 30. 31. 32. 33. 34. 35. 36. 37. 38. 39. 40. 41. 42. 43. 44. 45. 46. 47. 48. 49. 50.