PT-2014-1448
CVE-2014-0095
·
تاريخ النشر
2014-03-27
·
تاريخ التحديث
2022-05-17
الوصف من
CVSS 2.0
5.0
متوسطةالمقاييسAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions
Apache Tomcat versions prior to 8.0.4
Description
The issue allows remote attackers to cause a denial of service by consuming threads, leading to a hang in request processing. This is achieved by using an AJP request with a "Content-Length: 0" header.
Recommendations
For versions prior to 8.0.4, update to version 8.0.4 or later to resolve the issue. As a temporary workaround, consider restricting AJP requests with a "Content-Length: 0" header to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾