CVE-2010-2227
Apache Tomcat does not properly handle an invalid Transfer-Encoding header
6.4 MediumFix available
Apache Tomcat 5.5.0 through 5.5.29, 6.0.0 through 6.0.27, and 7.0.0 beta does not properly handle an invalid Transfer-Encoding header, which allows remote attackers to cause a denial of service (application outage) or obtain sensitive information via a crafted header that interferes with "recycling of a buffer."
Exploit likelihood
54.8%Down 8.7 points since Feb 4, 2022
What each source reports
NVD Score used
Apache Tomcat 5.5.0 through 5.5.29, 6.0.0 through 6.0.27, and 7.0.0 beta does not properly handle an invalid Transfer-Encoding header, which allows remote attackers to cause a denial of service (application outage) or obtain sensitive information via a crafted header that interferes with "recycling of a buffer."
- Record
CVE-2010-2227- CVSS 2.0
- 6.4 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Apache Tomcat 5.5.0 through 5.5.29, 6.0.0 through 6.0.27, and 7.0.0 beta does not properly handle an invalid Transfer-Encoding header, which allows remote attackers to cause a denial of service (application outage) or obtain sensitive information via a crafted header that interferes with "recycling of a buffer."
- Record
CVE-2010-2227- Updated
- 2026-11-02
EUVDEUVD-2022-3661 No score
Apache Tomcat 5.5.0 through 5.5.29, 6.0.0 through 6.0.27, and 7.0.0 beta does not properly handle an invalid Transfer-Encoding header, which allows remote attackers to cause a denial of service (application outage) or obtain sensitive information via a crafted header that interferes with "recycling of a buffer."
- Record
EUVD-2022-3661- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cxg2-49rq-8gcr No score
Apache Tomcat does not properly handle an invalid Transfer-Encoding header
Apache Tomcat 5.5.0 through 5.5.29, 6.0.0 through 6.0.27, and 7.0.0 beta does not properly handle an invalid Transfer-Encoding header, which allows remote attackers to cause a denial of service (application outage) or obtain sensitive information via a crafted header that interferes with "recycling of a buffer."
- Record
GHSA-cxg2-49rq-8gcr- Weakness
- CWE-119
- Updated
- 2026-11-02
OSVGHSA-cxg2-49rq-8gcr No score
Apache Tomcat does not properly handle an invalid Transfer-Encoding header
Apache Tomcat 5.5.0 through 5.5.29, 6.0.0 through 6.0.27, and 7.0.0 beta does not properly handle an invalid Transfer-Encoding header, which allows remote attackers to cause a denial of service (application outage) or obtain sensitive information via a crafted header that interferes with "recycling of a buffer."
- Record
GHSA-cxg2-49rq-8gcr- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
org.apache.tomcat:tomcatMaven |
7.0.0 up to 7.0.2 | 7.0.2 |
org.apache.tomcat:tomcatMaven |
5.5.0 up to 5.5.30 | 5.5.30 |
org.apache.tomcat:tomcatMaven |
6.0.0 up to 6.0.28 | 6.0.28 |
tomcat5.5Debian:5.0 From an advisory covering 9 CVEs |
before 5.5.26-5lenny2, plus listed versions 5.5.26-5 |
5.5.26-5lenny2 |
tomcat5Red Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs |
before 0:5.5.23-0jpp.9.el5_5 | 0:5.5.23-0jpp.9.el5_5 |
tomcat5-admin-webappsRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs |
before 0:5.5.23-0jpp.9.el5_5 | 0:5.5.23-0jpp.9.el5_5 |
tomcat5-common-libRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs |
before 0:5.5.23-0jpp.9.el5_5 | 0:5.5.23-0jpp.9.el5_5 |
tomcat5-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs |
before 0:5.5.23-0jpp.9.el5_5 | 0:5.5.23-0jpp.9.el5_5 |
tomcat5-jasperRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs |
before 0:5.5.23-0jpp.9.el5_5 | 0:5.5.23-0jpp.9.el5_5 |
tomcat5-jasper-javadocRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs |
before 0:5.5.23-0jpp.9.el5_5 | 0:5.5.23-0jpp.9.el5_5 |
Show 93 moreShow less
| Package | Affected | Fixed |
|---|---|---|
tomcat5-jsp-2.0-api-javadocRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs |
before 0:5.5.23-0jpp.9.el5_5 | 0:5.5.23-0jpp.9.el5_5 |
tomcat5-server-libRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs |
before 0:5.5.23-0jpp.9.el5_5 | 0:5.5.23-0jpp.9.el5_5 |
tomcat5-servlet-2.4-api-javadocRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs |
before 0:5.5.23-0jpp.9.el5_5 | 0:5.5.23-0jpp.9.el5_5 |
tomcat5-webappsRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs |
before 0:5.5.23-0jpp.9.el5_5 | 0:5.5.23-0jpp.9.el5_5 |
tomcat5Red Hat:enterprise_linux:5::client From an advisory covering 4 CVEs |
before 0:5.5.23-0jpp.9.el5_5 | 0:5.5.23-0jpp.9.el5_5 |
tomcat5-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 4 CVEs |
before 0:5.5.23-0jpp.9.el5_5 | 0:5.5.23-0jpp.9.el5_5 |
tomcat5-jsp-2.0-apiRed Hat:enterprise_linux:5::client From an advisory covering 4 CVEs |
before 0:5.5.23-0jpp.9.el5_5 | 0:5.5.23-0jpp.9.el5_5 |
tomcat5-servlet-2.4-apiRed Hat:enterprise_linux:5::client From an advisory covering 4 CVEs |
before 0:5.5.23-0jpp.9.el5_5 | 0:5.5.23-0jpp.9.el5_5 |
tomcat5Red Hat:enterprise_linux:5::server From an advisory covering 4 CVEs |
before 0:5.5.23-0jpp.9.el5_5 | 0:5.5.23-0jpp.9.el5_5 |
tomcat5-admin-webappsRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs |
before 0:5.5.23-0jpp.9.el5_5 | 0:5.5.23-0jpp.9.el5_5 |
tomcat5-common-libRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs |
before 0:5.5.23-0jpp.9.el5_5 | 0:5.5.23-0jpp.9.el5_5 |
tomcat5-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs |
before 0:5.5.23-0jpp.9.el5_5 | 0:5.5.23-0jpp.9.el5_5 |
tomcat5-jasperRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs |
before 0:5.5.23-0jpp.9.el5_5 | 0:5.5.23-0jpp.9.el5_5 |
tomcat5-jasper-javadocRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs |
before 0:5.5.23-0jpp.9.el5_5 | 0:5.5.23-0jpp.9.el5_5 |
tomcat5-jsp-2.0-apiRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs |
before 0:5.5.23-0jpp.9.el5_5 | 0:5.5.23-0jpp.9.el5_5 |
tomcat5-jsp-2.0-api-javadocRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs |
before 0:5.5.23-0jpp.9.el5_5 | 0:5.5.23-0jpp.9.el5_5 |
tomcat5-server-libRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs |
before 0:5.5.23-0jpp.9.el5_5 | 0:5.5.23-0jpp.9.el5_5 |
tomcat5-servlet-2.4-apiRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs |
before 0:5.5.23-0jpp.9.el5_5 | 0:5.5.23-0jpp.9.el5_5 |
tomcat5-servlet-2.4-api-javadocRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs |
before 0:5.5.23-0jpp.9.el5_5 | 0:5.5.23-0jpp.9.el5_5 |
tomcat5-webappsRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs |
before 0:5.5.23-0jpp.9.el5_5 | 0:5.5.23-0jpp.9.el5_5 |
tomcat5Red Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.28-9.patch_01.jdk6.ep5.el4 | 0:5.5.28-9.patch_01.jdk6.ep5.el4 |
tomcat5-admin-webappsRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.28-9.patch_01.jdk6.ep5.el4 | 0:5.5.28-9.patch_01.jdk6.ep5.el4 |
tomcat5-common-libRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.28-9.patch_01.jdk6.ep5.el4 | 0:5.5.28-9.patch_01.jdk6.ep5.el4 |
tomcat5-jasperRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.28-9.patch_01.jdk6.ep5.el4 | 0:5.5.28-9.patch_01.jdk6.ep5.el4 |
tomcat5-jasper-eclipseRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.28-9.patch_01.jdk6.ep5.el4 | 0:5.5.28-9.patch_01.jdk6.ep5.el4 |
tomcat5-jasper-javadocRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.28-9.patch_01.jdk6.ep5.el4 | 0:5.5.28-9.patch_01.jdk6.ep5.el4 |
tomcat5-jsp-2.0-apiRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.28-9.patch_01.jdk6.ep5.el4 | 0:5.5.28-9.patch_01.jdk6.ep5.el4 |
tomcat5-jsp-2.0-api-javadocRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.28-9.patch_01.jdk6.ep5.el4 | 0:5.5.28-9.patch_01.jdk6.ep5.el4 |
tomcat5-parentRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.28-9.patch_01.jdk6.ep5.el4 | 0:5.5.28-9.patch_01.jdk6.ep5.el4 |
tomcat5-server-libRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.28-9.patch_01.jdk6.ep5.el4 | 0:5.5.28-9.patch_01.jdk6.ep5.el4 |
tomcat5-servlet-2.4-apiRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.28-9.patch_01.jdk6.ep5.el4 | 0:5.5.28-9.patch_01.jdk6.ep5.el4 |
tomcat5-servlet-2.4-api-javadocRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.28-9.patch_01.jdk6.ep5.el4 | 0:5.5.28-9.patch_01.jdk6.ep5.el4 |
tomcat5-webappsRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.28-9.patch_01.jdk6.ep5.el4 | 0:5.5.28-9.patch_01.jdk6.ep5.el4 |
tomcat6Red Hat:jboss_enterprise_web_server:1::el4 |
before 0:6.0.24-7.patch_01.jdk6.ep5.el4 | 0:6.0.24-7.patch_01.jdk6.ep5.el4 |
tomcat6-admin-webappsRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:6.0.24-7.patch_01.jdk6.ep5.el4 | 0:6.0.24-7.patch_01.jdk6.ep5.el4 |
tomcat6-docs-webappRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:6.0.24-7.patch_01.jdk6.ep5.el4 | 0:6.0.24-7.patch_01.jdk6.ep5.el4 |
tomcat6-el-1.0-apiRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:6.0.24-7.patch_01.jdk6.ep5.el4 | 0:6.0.24-7.patch_01.jdk6.ep5.el4 |
tomcat6-javadocRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:6.0.24-7.patch_01.jdk6.ep5.el4 | 0:6.0.24-7.patch_01.jdk6.ep5.el4 |
tomcat6-jsp-2.1-apiRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:6.0.24-7.patch_01.jdk6.ep5.el4 | 0:6.0.24-7.patch_01.jdk6.ep5.el4 |
tomcat6-libRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:6.0.24-7.patch_01.jdk6.ep5.el4 | 0:6.0.24-7.patch_01.jdk6.ep5.el4 |
tomcat6-log4jRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:6.0.24-7.patch_01.jdk6.ep5.el4 | 0:6.0.24-7.patch_01.jdk6.ep5.el4 |
tomcat6-servlet-2.5-apiRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:6.0.24-7.patch_01.jdk6.ep5.el4 | 0:6.0.24-7.patch_01.jdk6.ep5.el4 |
tomcat6-webappsRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:6.0.24-7.patch_01.jdk6.ep5.el4 | 0:6.0.24-7.patch_01.jdk6.ep5.el4 |
tomcat5Red Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.28-9.patch_01.1.jdk6.ep5.el5 | 0:5.5.28-9.patch_01.1.jdk6.ep5.el5 |
tomcat5-admin-webappsRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.28-9.patch_01.1.jdk6.ep5.el5 | 0:5.5.28-9.patch_01.1.jdk6.ep5.el5 |
tomcat5-common-libRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.28-9.patch_01.1.jdk6.ep5.el5 | 0:5.5.28-9.patch_01.1.jdk6.ep5.el5 |
tomcat5-jasperRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.28-9.patch_01.1.jdk6.ep5.el5 | 0:5.5.28-9.patch_01.1.jdk6.ep5.el5 |
tomcat5-jasper-eclipseRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.28-9.patch_01.1.jdk6.ep5.el5 | 0:5.5.28-9.patch_01.1.jdk6.ep5.el5 |
tomcat5-jasper-javadocRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.28-9.patch_01.1.jdk6.ep5.el5 | 0:5.5.28-9.patch_01.1.jdk6.ep5.el5 |
tomcat5-jsp-2.0-apiRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.28-9.patch_01.1.jdk6.ep5.el5 | 0:5.5.28-9.patch_01.1.jdk6.ep5.el5 |
tomcat5-jsp-2.0-api-javadocRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.28-9.patch_01.1.jdk6.ep5.el5 | 0:5.5.28-9.patch_01.1.jdk6.ep5.el5 |
tomcat5-parentRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.28-9.patch_01.1.jdk6.ep5.el5 | 0:5.5.28-9.patch_01.1.jdk6.ep5.el5 |
tomcat5-server-libRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.28-9.patch_01.1.jdk6.ep5.el5 | 0:5.5.28-9.patch_01.1.jdk6.ep5.el5 |
tomcat5-servlet-2.4-apiRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.28-9.patch_01.1.jdk6.ep5.el5 | 0:5.5.28-9.patch_01.1.jdk6.ep5.el5 |
tomcat5-servlet-2.4-api-javadocRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.28-9.patch_01.1.jdk6.ep5.el5 | 0:5.5.28-9.patch_01.1.jdk6.ep5.el5 |
tomcat5-webappsRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.28-9.patch_01.1.jdk6.ep5.el5 | 0:5.5.28-9.patch_01.1.jdk6.ep5.el5 |
tomcat6Red Hat:jboss_enterprise_web_server:1::el5 |
before 0:6.0.24-7.patch_01.jdk6.ep5.el5 | 0:6.0.24-7.patch_01.jdk6.ep5.el5 |
tomcat6-admin-webappsRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:6.0.24-7.patch_01.jdk6.ep5.el5 | 0:6.0.24-7.patch_01.jdk6.ep5.el5 |
tomcat6-docs-webappRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:6.0.24-7.patch_01.jdk6.ep5.el5 | 0:6.0.24-7.patch_01.jdk6.ep5.el5 |
tomcat6-el-1.0-apiRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:6.0.24-7.patch_01.jdk6.ep5.el5 | 0:6.0.24-7.patch_01.jdk6.ep5.el5 |
tomcat6-javadocRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:6.0.24-7.patch_01.jdk6.ep5.el5 | 0:6.0.24-7.patch_01.jdk6.ep5.el5 |
tomcat6-jsp-2.1-apiRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:6.0.24-7.patch_01.jdk6.ep5.el5 | 0:6.0.24-7.patch_01.jdk6.ep5.el5 |
tomcat6-libRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:6.0.24-7.patch_01.jdk6.ep5.el5 | 0:6.0.24-7.patch_01.jdk6.ep5.el5 |
tomcat6-log4jRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:6.0.24-7.patch_01.jdk6.ep5.el5 | 0:6.0.24-7.patch_01.jdk6.ep5.el5 |
tomcat6-servlet-2.5-apiRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:6.0.24-7.patch_01.jdk6.ep5.el5 | 0:6.0.24-7.patch_01.jdk6.ep5.el5 |
tomcat6-webappsRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:6.0.24-7.patch_01.jdk6.ep5.el5 | 0:6.0.24-7.patch_01.jdk6.ep5.el5 |
tomcat5Red Hat:rhel_application_server:2 From an advisory covering 3 CVEs |
before 0:5.5.23-0jpp_4rh.17 | 0:5.5.23-0jpp_4rh.17 |
tomcat5-admin-webappsRed Hat:rhel_application_server:2 From an advisory covering 3 CVEs |
before 0:5.5.23-0jpp_4rh.17 | 0:5.5.23-0jpp_4rh.17 |
tomcat5-common-libRed Hat:rhel_application_server:2 From an advisory covering 3 CVEs |
before 0:5.5.23-0jpp_4rh.17 | 0:5.5.23-0jpp_4rh.17 |
tomcat5-jasperRed Hat:rhel_application_server:2 From an advisory covering 3 CVEs |
before 0:5.5.23-0jpp_4rh.17 | 0:5.5.23-0jpp_4rh.17 |
tomcat5-jasper-javadocRed Hat:rhel_application_server:2 From an advisory covering 3 CVEs |
before 0:5.5.23-0jpp_4rh.17 | 0:5.5.23-0jpp_4rh.17 |
tomcat5-jsp-2.0-apiRed Hat:rhel_application_server:2 From an advisory covering 3 CVEs |
before 0:5.5.23-0jpp_4rh.17 | 0:5.5.23-0jpp_4rh.17 |
tomcat5-jsp-2.0-api-javadocRed Hat:rhel_application_server:2 From an advisory covering 3 CVEs |
before 0:5.5.23-0jpp_4rh.17 | 0:5.5.23-0jpp_4rh.17 |
tomcat5-server-libRed Hat:rhel_application_server:2 From an advisory covering 3 CVEs |
before 0:5.5.23-0jpp_4rh.17 | 0:5.5.23-0jpp_4rh.17 |
tomcat5-servlet-2.4-apiRed Hat:rhel_application_server:2 From an advisory covering 3 CVEs |
before 0:5.5.23-0jpp_4rh.17 | 0:5.5.23-0jpp_4rh.17 |
tomcat5-servlet-2.4-api-javadocRed Hat:rhel_application_server:2 From an advisory covering 3 CVEs |
before 0:5.5.23-0jpp_4rh.17 | 0:5.5.23-0jpp_4rh.17 |
tomcat5-webappsRed Hat:rhel_application_server:2 From an advisory covering 3 CVEs |
before 0:5.5.23-0jpp_4rh.17 | 0:5.5.23-0jpp_4rh.17 |
tomcat5Red Hat:rhel_developer_suite:3 |
before 0:5.5.23-0jpp_21rh | 0:5.5.23-0jpp_21rh |
tomcat5-common-libRed Hat:rhel_developer_suite:3 |
before 0:5.5.23-0jpp_21rh | 0:5.5.23-0jpp_21rh |
tomcat5-jasperRed Hat:rhel_developer_suite:3 |
before 0:5.5.23-0jpp_21rh | 0:5.5.23-0jpp_21rh |
tomcat5-jsp-2.0-apiRed Hat:rhel_developer_suite:3 |
before 0:5.5.23-0jpp_21rh | 0:5.5.23-0jpp_21rh |
tomcat5-server-libRed Hat:rhel_developer_suite:3 |
before 0:5.5.23-0jpp_21rh | 0:5.5.23-0jpp_21rh |
tomcat5-servlet-2.4-apiRed Hat:rhel_developer_suite:3 |
before 0:5.5.23-0jpp_21rh | 0:5.5.23-0jpp_21rh |
jbosswebRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 2 CVEs |
before 0:2.0.0-6.CP14.0jpp.ep1.1.el4 | 0:2.0.0-6.CP14.0jpp.ep1.1.el4 |
jbosswebRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 2 CVEs |
before 0:2.0.0-6.CP14.0jpp.ep1.1.el4 | 0:2.0.0-6.CP14.0jpp.ep1.1.el4 |
jbosswebRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 2 CVEs |
before 0:2.0.0-6.CP14.0jpp.ep1.1.el5 | 0:2.0.0-6.CP14.0jpp.ep1.1.el5 |
jbosswebRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 2 CVEs |
before 0:2.0.0-6.CP14.0jpp.ep1.1.el5 | 0:2.0.0-6.CP14.0jpp.ep1.1.el5 |
tomcat5Red Hat:certificate_system:7.3 From an advisory covering 3 CVEs |
before 0:5.5.23-0jpp_4rh.19 | 0:5.5.23-0jpp_4rh.19 |
tomcat5-common-libRed Hat:certificate_system:7.3 From an advisory covering 3 CVEs |
before 0:5.5.23-0jpp_4rh.19 | 0:5.5.23-0jpp_4rh.19 |
tomcat5-jasperRed Hat:certificate_system:7.3 From an advisory covering 3 CVEs |
before 0:5.5.23-0jpp_4rh.19 | 0:5.5.23-0jpp_4rh.19 |
tomcat5-jsp-2.0-apiRed Hat:certificate_system:7.3 From an advisory covering 3 CVEs |
before 0:5.5.23-0jpp_4rh.19 | 0:5.5.23-0jpp_4rh.19 |
tomcat5-server-libRed Hat:certificate_system:7.3 From an advisory covering 3 CVEs |
before 0:5.5.23-0jpp_4rh.19 | 0:5.5.23-0jpp_4rh.19 |
tomcat5-servlet-2.4-apiRed Hat:certificate_system:7.3 From an advisory covering 3 CVEs |
before 0:5.5.23-0jpp_4rh.19 | 0:5.5.23-0jpp_4rh.19 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Metasploit | Slowloris Denial of Service Attack | 2009-06-17 |
| Metasploit | Apache Tomcat Transfer-Encoding Information Disclosure and DoS | 2010-07-09 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, exploits, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, Metasploit, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-2227 is a medium vulnerability (CVSS 6.4) in Apache Tomcat, published July 13, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 54.8%, the 99th percentile. Fixed in org.apache.tomcat:tomcat 7.0.2.
References
novell.com/support/viewContent.do?externalId=7007274
securityfocus.com/archive/1/512272/100/0/threaded
secunia.com/advisories/42079
debian.org/security/2011/dsa-2207
marc.info?l=bugtraq&m=136485229118404&w=2
Show 96 moreShow less
mandriva.com/security/advisories?name=MDVSA-2010:177
vupen.com/english/advisories/2010/3056
redhat.com/support/errata/RHSA-2010-0581.html
tomcat.apache.org/security-7.html
lists.fedoraproject.org/pipermail/package-announce/2010-November/050214.html
svn.apache.org/viewvc?view=revision&revision=959428
geronimo.apache.org/22x-security-report.html
lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html
vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18532
securitytracker.com/id?1024180
lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html
exchange.xforce.ibmcloud.com/vulnerabilities/60264
support.apple.com/kb/HT5002
lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E
nvd.nist.gov/vuln/detail/CVE-2010-2227
github.com/apache/tomcat/commit/40e5880dfc51517334acda5f12beacdec52ca283
access.redhat.com/errata/RHSA-2010:0580
web.archive.org/web/20110213053623/http://secunia.com/advisories/43310
bugzilla.redhat.com/show_bug.cgi?id=559738
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0580.json
cve.org/CVERecord?id=CVE-2009-2693