Description
Apache Tomcat through 7.0.x allows remote attackers to cause a denial of service (daemon outage) via partial HTTP requests, as demonstrated by Slowloris.
References
- [oss-security] 20121125 Re: CVE Request: slowloris for tomcat mailing-list
- openSUSE-SU-2012:1700 vendor-advisory
- 56686 vdb-entry
- openSUSE-SU-2013:0147 vendor-advisory
- http://captainholly.wordpress.com/2009/06/19/slowloris-vs-tomcat/
- [users] 20090620 Re: How does Tomcat handle a slow HTTP DoS? mailing-list
- [users] 20090619 How does Tomcat handle a slow HTTP DoS? mailing-list
- https://bugzilla.redhat.com/show_bug.cgi?id=880011
- openSUSE-SU-2012:1701 vendor-advisory
- apache-tomcat-slowloris-dos(80317) vdb-entry