Every CVE Search/ Get API key

CVE-2006-7197

Apache Tomcat Buffer Over-Read

7.8 High

The AJP connector in Apache Tomcat 5.5.15 uses an incorrect length for chunks, which can cause a buffer over-read in the ajp_process_callback in mod_jk, which allows remote attackers to read portions of sensitive memory.

Exploit likelihood

8.32%Up 4.9 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.8

The AJP connector in Apache Tomcat 5.5.15 uses an incorrect length for chunks, which can cause a buffer over-read in the ajp_process_callback in mod_jk, which allows remote attackers to read portions of sensitive memory.

Record
CVE-2006-7197
CVSS 2.0
7.8 HighAV:N/AC:L/Au:N/C:C/I:N/A:N
Updated
2026-11-02
CVE List No score

The AJP connector in Apache Tomcat 5.5.15 uses an incorrect length for chunks, which can cause a buffer over-read in the ajp_process_callback in mod_jk, which allows remote attackers to read portions of sensitive memory.

Record
CVE-2006-7197
Updated
2026-11-02
EUVDEUVD-2022-4411 No score

The AJP connector in Apache Tomcat 5.5.15 uses an incorrect length for chunks, which can cause a buffer over-read in the ajp_process_callback in mod_jk, which allows remote attackers to read portions of sensitive memory.

Record
EUVD-2022-4411
Updated
2026-11-03
GitHub AdvisoriesGHSA-jpqr-vh55-xqxf No score

Apache Tomcat Buffer Over-Read

The AJP connector in Apache Tomcat 5.5.15 uses an incorrect length for chunks, which can cause a buffer over-read in the ajp_process_callback in mod_jk, which allows remote attackers to read portions of sensitive memory.

Record
GHSA-jpqr-vh55-xqxf
Weakness
CWE-126
Updated
2026-11-02
OSVGHSA-jpqr-vh55-xqxf No score

Apache Tomcat Buffer Over-Read

The AJP connector in Apache Tomcat 5.5.15 uses an incorrect length for chunks, which can cause a buffer over-read in the ajp_process_callback in mod_jk, which allows remote attackers to read portions of sensitive memory.

Record
GHSA-jpqr-vh55-xqxf
Weakness
CWE-126
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
org.apache.tomcat:tomcat
Maven
 through 5.5.15 None known
jabberd
Red Hat:network_satellite:5.0:el4
From an advisory covering 35 CVEs
 before 0:2.0s10-3.38.rhn
0:2.0s10-3.38.rhn
java-1.4.2-ibm
Red Hat:network_satellite:5.0:el4
From an advisory covering 35 CVEs
 before 0:1.4.2.10-1jpp.2.el4
0:1.4.2.10-1jpp.2.el4
java-1.4.2-ibm-devel
Red Hat:network_satellite:5.0:el4
From an advisory covering 35 CVEs
 before 0:1.4.2.10-1jpp.2.el4
0:1.4.2.10-1jpp.2.el4
jfreechart
Red Hat:network_satellite:5.0:el4
From an advisory covering 35 CVEs
 before 0:0.9.20-3.rhn
0:0.9.20-3.rhn
openmotif21
Red Hat:network_satellite:5.0:el4
From an advisory covering 35 CVEs
 before 0:2.1.30-11.RHEL4.6
0:2.1.30-11.RHEL4.6
openmotif21-debuginfo
Red Hat:network_satellite:5.0:el4
From an advisory covering 35 CVEs
 before 0:2.1.30-11.RHEL4.6
0:2.1.30-11.RHEL4.6
perl-Crypt-CBC
Red Hat:network_satellite:5.0:el4
From an advisory covering 35 CVEs
 before 0:2.24-1.el4
0:2.24-1.el4
rhn-apache
Red Hat:network_satellite:5.0:el4
From an advisory covering 35 CVEs
 before 0:1.3.27-36.rhn.rhel4
0:1.3.27-36.rhn.rhel4
rhn-modjk-ap13
Red Hat:network_satellite:5.0:el4
From an advisory covering 35 CVEs
 before 0:1.2.23-2rhn.rhel4
0:1.2.23-2rhn.rhel4
Show 27 moreShow less
Affected packages
PackageAffectedFixed
rhn-modperl
Red Hat:network_satellite:5.0:el4
From an advisory covering 35 CVEs
 before 0:1.29-16.rhel4
0:1.29-16.rhel4
rhn-modssl
Red Hat:network_satellite:5.0:el4
From an advisory covering 35 CVEs
 before 0:2.8.12-8.rhn.10.rhel4
0:2.8.12-8.rhn.10.rhel4
tomcat5
Red Hat:network_satellite:5.0:el4
From an advisory covering 35 CVEs
 before 0:5.0.30-0jpp_10rh
0:5.0.30-0jpp_10rh
jabberd
Red Hat:network_satellite:4.2::el3
From an advisory covering 37 CVEs
 before 0:2.0s10-3.37.rhn
0:2.0s10-3.37.rhn
java-1.4.2-ibm
Red Hat:network_satellite:4.2::el3
From an advisory covering 37 CVEs
 before 0:1.4.2.10-1jpp.2.el3
0:1.4.2.10-1jpp.2.el3
java-1.4.2-ibm-devel
Red Hat:network_satellite:4.2::el3
From an advisory covering 37 CVEs
 before 0:1.4.2.10-1jpp.2.el3
0:1.4.2.10-1jpp.2.el3
jfreechart
Red Hat:network_satellite:4.2::el3
From an advisory covering 37 CVEs
 before 0:0.9.20-3.rhn
0:0.9.20-3.rhn
openmotif21
Red Hat:network_satellite:4.2::el3
From an advisory covering 37 CVEs
 before 0:2.1.30-9.RHEL3.8
0:2.1.30-9.RHEL3.8
openmotif21-debuginfo
Red Hat:network_satellite:4.2::el3
From an advisory covering 37 CVEs
 before 0:2.1.30-9.RHEL3.8
0:2.1.30-9.RHEL3.8
perl-Crypt-CBC
Red Hat:network_satellite:4.2::el3
From an advisory covering 37 CVEs
 before 0:2.24-1.el3
0:2.24-1.el3
rhn-apache
Red Hat:network_satellite:4.2::el3
From an advisory covering 37 CVEs
 before 0:1.3.27-36.rhn.rhel3
0:1.3.27-36.rhn.rhel3
rhn-modjk-ap13
Red Hat:network_satellite:4.2::el3
From an advisory covering 37 CVEs
 before 0:1.2.23-2rhn.rhel3
0:1.2.23-2rhn.rhel3
rhn-modperl
Red Hat:network_satellite:4.2::el3
From an advisory covering 37 CVEs
 before 0:1.29-16.rhel3
0:1.29-16.rhel3
rhn-modssl
Red Hat:network_satellite:4.2::el3
From an advisory covering 37 CVEs
 before 0:2.8.12-8.rhn.10.rhel3
0:2.8.12-8.rhn.10.rhel3
tomcat5
Red Hat:network_satellite:4.2::el3
From an advisory covering 37 CVEs
 before 0:5.0.30-0jpp_10rh
0:5.0.30-0jpp_10rh
jabberd
Red Hat:network_satellite:4.2::el4
From an advisory covering 37 CVEs
 before 0:2.0s10-3.38.rhn
0:2.0s10-3.38.rhn
java-1.4.2-ibm
Red Hat:network_satellite:4.2::el4
From an advisory covering 37 CVEs
 before 0:1.4.2.10-1jpp.2.el4
0:1.4.2.10-1jpp.2.el4
java-1.4.2-ibm-devel
Red Hat:network_satellite:4.2::el4
From an advisory covering 37 CVEs
 before 0:1.4.2.10-1jpp.2.el4
0:1.4.2.10-1jpp.2.el4
jfreechart
Red Hat:network_satellite:4.2::el4
From an advisory covering 37 CVEs
 before 0:0.9.20-3.rhn
0:0.9.20-3.rhn
openmotif21
Red Hat:network_satellite:4.2::el4
From an advisory covering 37 CVEs
 before 0:2.1.30-11.RHEL4.6
0:2.1.30-11.RHEL4.6
openmotif21-debuginfo
Red Hat:network_satellite:4.2::el4
From an advisory covering 37 CVEs
 before 0:2.1.30-11.RHEL4.6
0:2.1.30-11.RHEL4.6
perl-Crypt-CBC
Red Hat:network_satellite:4.2::el4
From an advisory covering 37 CVEs
 before 0:2.24-1.el4
0:2.24-1.el4
rhn-apache
Red Hat:network_satellite:4.2::el4
From an advisory covering 37 CVEs
 before 0:1.3.27-36.rhn.rhel4
0:1.3.27-36.rhn.rhel4
rhn-modjk-ap13
Red Hat:network_satellite:4.2::el4
From an advisory covering 37 CVEs
 before 0:1.2.23-2rhn.rhel4
0:1.2.23-2rhn.rhel4
rhn-modperl
Red Hat:network_satellite:4.2::el4
From an advisory covering 37 CVEs
 before 0:1.29-16.rhel4
0:1.29-16.rhel4
rhn-modssl
Red Hat:network_satellite:4.2::el4
From an advisory covering 37 CVEs
 before 0:2.8.12-8.rhn.10.rhel4
0:2.8.12-8.rhn.10.rhel4
tomcat5
Red Hat:network_satellite:4.2::el4
From an advisory covering 37 CVEs
 before 0:5.0.30-0jpp_10rh
0:5.0.30-0jpp_10rh

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2006-7197 is a high vulnerability (CVSS 7.8) in Apache Tomcat, published April 25, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 8.32%, the 94th percentile. No source names a fixed version.

References

Show 172 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open