Description
java/org/apache/coyote/http11/InternalNioInputBuffer.java in the HTTP NIO connector in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.28 does not properly restrict the request-header size, which allows remote attackers to cause a denial of service (memory consumption) via a large amount of header data.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat JBoss Web Server 2 | tomcat6 +9 | 6.0.35-6_patch_06.ep6.el5 | RHSA-2013:0266 |
Advisories 1
- RHSA-2013:0266 Red Hat Security Advisory: tomcat6 security update Red Hat Security Advisories (RHSA) · Aug 5, 2026
References
- SSRT101139 vendor-advisory
- 51371 third-party-advisory
- openSUSE-SU-2012:1700 vendor-advisory
- oval:org.mitre.oval:def:19218 vdb-entry signature
- USN-1637-1 vendor-advisory
- SSRT101182 vendor-advisory
- http://tomcat.apache.org/security-7.html
- 56402 vdb-entry
- http://svn.apache.org/viewvc?view=revision&revision=1356208
- http://tomcat.apache.org/security-6.html
- 57126 third-party-advisory
- openSUSE-SU-2013:0147 vendor-advisory
- HPSBST02955 vendor-advisory
- openSUSE-SU-2012:1701 vendor-advisory
- http://svn.apache.org/viewvc?view=revision&revision=1350301
- 1027729 vdb-entry