CVE-2012-5568

תיאור (מקור, אנגלית)

Apache Tomcat through 7.0.x allows remote attackers to cause a denial of service (daemon outage) via partial HTTP requests, as demonstrated by Slowloris.

מדדים

EPSS — סבירות ניצול

10% (אחוזון 100) נכון ל-12/10/2026

מוצרים מושפעים

apache: tomcat; opensuse: opensuse

קישורים

• http://tomcat.10.n6.nabble.com/How-does-Tomcat-handle-a-slow-HTTP-DoS-tc214777‮… Vendor Advisory
• http://tomcat.10.n6.nabble.com/How-does-Tomcat-handle-a-slow-HTTP-DoS-tc214777‮… Vendor Advisory
• http://tomcat.10.n6.nabble.com/How-does-Tomcat-handle-a-slow-HTTP-DoS-tc214777‮… Vendor Advisory
• http://tomcat.10.n6.nabble.com/How-does-Tomcat-handle-a-slow-HTTP-DoS-tc214777‮… Vendor Advisory
• http://captainholly.wordpress.com/2009/06/19/slowloris-vs-tomcat/ ExploitThird Party Advisory
• http://captainholly.wordpress.com/2009/06/19/slowloris-vs-tomcat/ ExploitThird Party Advisory
• http://lists.opensuse.org/opensuse-updates/2012-12/msg00089.html Mailing ListThird Party Advisory
• http://lists.opensuse.org/opensuse-updates/2012-12/msg00090.html Mailing ListThird Party Advisory
• http://lists.opensuse.org/opensuse-updates/2013-01/msg00037.html Mailing ListThird Party Advisory
• http://openwall.com/lists/oss-security/2012/11/26/2 Mailing ListThird Party Advisory