GitHub Advisoryadvisory · Maven

GHSA-7wj2-48c4-2684 Apache Tomcat Denial of Service vulnerability in the Catalina package

MEDIUM Published 2022-04-29 Modified 2023-09-18 Official page ↗
Aliases
CVE-2003-0866
Ecosystem
Maven
Packages
org.apache.tomcat:tomcat
Severity
Moderate
Weaknesses
CWE-400
Reviewed
2023-09-18

Affected packages

• Maven org.apache.tomcat:tomcat: >= 4.0, < 4.1.0 → fixed in 4.1.0

Description

The Catalina org.apache.catalina.connector.http package in Tomcat 4.0.x up to 4.0.6 allows remote attackers to cause a denial of service via several requests that do not follow the HTTP protocol, which causes Tomcat to reject later requests.

Related

Alias · CVE (1)

  • CVE-2003-0866 The Catalina org.apache.catalina.connector.http package in Tomcat 4.0.x up to 4.0.3 allows remote attackers to cause a denial of service… vulnerability

Weakness · CWE (1)

  • CWE-400 Uncontrolled Resource Consumption weakness

References