CVE-2011-4858
1 advisory.
Maven/org.apache.tomcat:tomcat CVE-2011-4858: medium
Improper Input Validation in Apache Tomcat
Action: Upgrade org.apache.tomcat:tomcat to 5.5.35 (5.x), 6.0.35 (6.x) or 7.0.23 (7.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.5.0 | 5.5.35 | - |
| 6.0.0 | 6.0.35 | - |
| 7.0.0 | 7.0.23 | - |
Fixed versions
| 5.5.35 | 6.0.35 | 7.0.23 |
Sources
- osv: GHSA-wr3m-gw98-mc3j
- https://nvd.nist.gov/vuln/detail/CVE-2011-4858
- https://bugzilla.redhat.com/show_bug.cgi?id=750521
- https://github.com/FireFart/HashCollision-DOS-POC/blob/master/HashtablePOC.py
- https://github.com/apache/tomcat
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18886
- http://mail-archives.apache.org/mod_mbox/tomcat-announce/201112.mbox/%3c4EFB9800.5010106@apache.org%3e
- http://marc.info/?l=bugtraq&m=132871655717248&w=2
- http://marc.info/?l=bugtraq&m=133294394108746&w=2
- http://marc.info/?l=bugtraq&m=136485229118404&w=2
- http://rhn.redhat.com/errata/RHSA-2012-0074.html
- http://rhn.redhat.com/errata/RHSA-2012-0075.html
- http://rhn.redhat.com/errata/RHSA-2012-0076.html
- http://tomcat.apache.org/tomcat-7.0-doc/changelog.html
- http://www.debian.org/security/2012/dsa-2401
- http://www.kb.cert.org/vuls/id/903934
- http://www.nruns.com/_downloads/advisory28122011.pdf
- http://www.ocert.org/advisories/ocert-2011-003.html
CVE-2011-4858 · published · modified · JSON