CVE-2010-2227: Buffer Overflow
Apache Tomcat 5.5.0 through 5.5.29, 6.0.0 through 6.0.27, and 7.0.0 beta does not properly handle an invalid Transfer-Encoding header, which allows remote attackers to cause a denial of service (application outage) or obtain sensitive information via a crafted header that interferes with "recycling of a buffer."
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-2227?
CVE-2010-2227 has been classified as a medium severity vulnerability due to its potential for denial of service and information disclosure.
How do I fix CVE-2010-2227?
To fix CVE-2010-2227, upgrade to Apache Tomcat versions 5.5.30, 6.0.28, or 7.0.2 or later.
Which versions of Apache Tomcat are affected by CVE-2010-2227?
The affected versions include Apache Tomcat 5.5.0 through 5.5.29, 6.0.0 through 6.0.27, and 7.0.0 beta.
What types of attacks can exploit CVE-2010-2227?
CVE-2010-2227 can be exploited to cause application outages or to obtain sensitive information through crafted Transfer-Encoding headers.
How can I determine if my Apache Tomcat server is vulnerable to CVE-2010-2227?
You can determine vulnerability by checking the version of your Apache Tomcat server against the affected versions list.