CVE-2012-4534
Beschrijving
org/apache/tomcat/util/net/NioEndpoint.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.28, when the NIO connector is used in conjunction with sendfile and HTTPS, allows remote attackers to cause a denial of service (infinite loop) by terminating the connection during the reading of a response.
Vendors
Affected products
References
- archives.neohapsis.com
- lists.opensuse.org
- lists.opensuse.org
- lists.opensuse.org
- marc.info
- marc.info
- rhn.redhat.com
- secunia.com
- svn.apache.org
- svn.apache.org
- svn.apache.org
- tomcat.apache.org
- tomcat.apache.org
- www.securityfocus.com
- www.securitytracker.com
- www.ubuntu.com
- h20566.www2.hp.com
- issues.apache.org
- oval.cisecurity.org