Every CVE Search/ Get API key

CVE-2012-4534

org/apache/tomcat/util/net/NioEndpoint.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0...

2.6 LowFix available

CVE-2012-4534 is a low vulnerability (CVSS 2.6) in Apache Tomcat, published December 19, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 7.45%, the 94th percentile. Fixed in tomcat6 0:6.0.35-6_patch_06.ep6.el5.

org/apache/tomcat/util/net/NioEndpoint.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.28, when the NIO connector is used in conjunction with sendfile and HTTPS, allows remote attackers to cause a denial of service (infinite loop) by terminating the connection during the reading of a response.

Exploit likelihood

7.45%Up 0.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 2.6

org/apache/tomcat/util/net/NioEndpoint.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.28, when the NIO connector is used in conjunction with sendfile and HTTPS, allows remote attackers to cause a denial of service (infinite loop) by terminating the connection during the reading of a response.

Record
CVE-2012-4534
CVSS 2.0
2.6 LowAV:N/AC:H/Au:N/C:N/I:N/A:P
Weakness
CWE-399
Updated
2026-11-02
CVE List No score

org/apache/tomcat/util/net/NioEndpoint.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.28, when the NIO connector is used in conjunction with sendfile and HTTPS, allows remote attackers to cause a denial of service (infinite loop) by terminating the connection during the reading of a response.

Record
CVE-2012-4534
Updated
2026-11-02
EUVDEUVD-2012-4462 No score

org/apache/tomcat/util/net/NioEndpoint.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.28, when the NIO connector is used in conjunction with sendfile and HTTPS, allows remote attackers to cause a denial of service (infinite loop) by terminating the connection during the reading of a response.

Record
EUVD-2012-4462
Updated
2026-11-02
GitHub AdvisoriesGHSA-pxwv-88pv-hh3j No score

org/apache/tomcat/util/net/NioEndpoint.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0...

org/apache/tomcat/util/net/NioEndpoint.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.28, when the NIO connector is used in conjunction with sendfile and HTTPS, allows remote attackers to cause a denial of service (infinite loop) by terminating the connection during the reading of a response.

Record
GHSA-pxwv-88pv-hh3j
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
tomcat6
Red Hat:jboss_enterprise_web_server:2::el5
 before 0:6.0.35-6_patch_06.ep6.el5
0:6.0.35-6_patch_06.ep6.el5
tomcat6-admin-webapps
Red Hat:jboss_enterprise_web_server:2::el5
 before 0:6.0.35-6_patch_06.ep6.el5
0:6.0.35-6_patch_06.ep6.el5
tomcat6-docs-webapp
Red Hat:jboss_enterprise_web_server:2::el5
 before 0:6.0.35-6_patch_06.ep6.el5
0:6.0.35-6_patch_06.ep6.el5
tomcat6-el-1.0-api
Red Hat:jboss_enterprise_web_server:2::el5
 before 0:6.0.35-6_patch_06.ep6.el5
0:6.0.35-6_patch_06.ep6.el5
tomcat6-javadoc
Red Hat:jboss_enterprise_web_server:2::el5
 before 0:6.0.35-6_patch_06.ep6.el5
0:6.0.35-6_patch_06.ep6.el5
tomcat6-jsp-2.1-api
Red Hat:jboss_enterprise_web_server:2::el5
 before 0:6.0.35-6_patch_06.ep6.el5
0:6.0.35-6_patch_06.ep6.el5
tomcat6-lib
Red Hat:jboss_enterprise_web_server:2::el5
 before 0:6.0.35-6_patch_06.ep6.el5
0:6.0.35-6_patch_06.ep6.el5
tomcat6-log4j
Red Hat:jboss_enterprise_web_server:2::el5
 before 0:6.0.35-6_patch_06.ep6.el5
0:6.0.35-6_patch_06.ep6.el5
tomcat6-servlet-2.5-api
Red Hat:jboss_enterprise_web_server:2::el5
 before 0:6.0.35-6_patch_06.ep6.el5
0:6.0.35-6_patch_06.ep6.el5
tomcat6-webapps
Red Hat:jboss_enterprise_web_server:2::el5
 before 0:6.0.35-6_patch_06.ep6.el5
0:6.0.35-6_patch_06.ep6.el5
Show 46 moreShow less
Affected packages
PackageAffectedFixed
tomcat6
Red Hat:jboss_enterprise_web_server:2::el6
 before 0:6.0.35-29_patch_06.ep6.el6
0:6.0.35-29_patch_06.ep6.el6
tomcat6-admin-webapps
Red Hat:jboss_enterprise_web_server:2::el6
 before 0:6.0.35-29_patch_06.ep6.el6
0:6.0.35-29_patch_06.ep6.el6
tomcat6-docs-webapp
Red Hat:jboss_enterprise_web_server:2::el6
 before 0:6.0.35-29_patch_06.ep6.el6
0:6.0.35-29_patch_06.ep6.el6
tomcat6-el-1.0-api
Red Hat:jboss_enterprise_web_server:2::el6
 before 0:6.0.35-29_patch_06.ep6.el6
0:6.0.35-29_patch_06.ep6.el6
tomcat6-javadoc
Red Hat:jboss_enterprise_web_server:2::el6
 before 0:6.0.35-29_patch_06.ep6.el6
0:6.0.35-29_patch_06.ep6.el6
tomcat6-jsp-2.1-api
Red Hat:jboss_enterprise_web_server:2::el6
 before 0:6.0.35-29_patch_06.ep6.el6
0:6.0.35-29_patch_06.ep6.el6
tomcat6-lib
Red Hat:jboss_enterprise_web_server:2::el6
 before 0:6.0.35-29_patch_06.ep6.el6
0:6.0.35-29_patch_06.ep6.el6
tomcat6-log4j
Red Hat:jboss_enterprise_web_server:2::el6
 before 0:6.0.35-29_patch_06.ep6.el6
0:6.0.35-29_patch_06.ep6.el6
tomcat6-servlet-2.5-api
Red Hat:jboss_enterprise_web_server:2::el6
 before 0:6.0.35-29_patch_06.ep6.el6
0:6.0.35-29_patch_06.ep6.el6
tomcat6-webapps
Red Hat:jboss_enterprise_web_server:2::el6
 before 0:6.0.35-29_patch_06.ep6.el6
0:6.0.35-29_patch_06.ep6.el6
tomcat6
Red Hat:enterprise_linux:6::client
 before 0:6.0.24-52.el6_4
0:6.0.24-52.el6_4
tomcat6-admin-webapps
Red Hat:enterprise_linux:6::client
 before 0:6.0.24-52.el6_4
0:6.0.24-52.el6_4
tomcat6-docs-webapp
Red Hat:enterprise_linux:6::client
 before 0:6.0.24-52.el6_4
0:6.0.24-52.el6_4
tomcat6-el-2.1-api
Red Hat:enterprise_linux:6::client
 before 0:6.0.24-52.el6_4
0:6.0.24-52.el6_4
tomcat6-javadoc
Red Hat:enterprise_linux:6::client
 before 0:6.0.24-52.el6_4
0:6.0.24-52.el6_4
tomcat6-jsp-2.1-api
Red Hat:enterprise_linux:6::client
 before 0:6.0.24-52.el6_4
0:6.0.24-52.el6_4
tomcat6-lib
Red Hat:enterprise_linux:6::client
 before 0:6.0.24-52.el6_4
0:6.0.24-52.el6_4
tomcat6-servlet-2.5-api
Red Hat:enterprise_linux:6::client
 before 0:6.0.24-52.el6_4
0:6.0.24-52.el6_4
tomcat6-webapps
Red Hat:enterprise_linux:6::client
 before 0:6.0.24-52.el6_4
0:6.0.24-52.el6_4
tomcat6
Red Hat:enterprise_linux:6::computenode
 before 0:6.0.24-52.el6_4
0:6.0.24-52.el6_4
tomcat6-admin-webapps
Red Hat:enterprise_linux:6::computenode
 before 0:6.0.24-52.el6_4
0:6.0.24-52.el6_4
tomcat6-docs-webapp
Red Hat:enterprise_linux:6::computenode
 before 0:6.0.24-52.el6_4
0:6.0.24-52.el6_4
tomcat6-el-2.1-api
Red Hat:enterprise_linux:6::computenode
 before 0:6.0.24-52.el6_4
0:6.0.24-52.el6_4
tomcat6-javadoc
Red Hat:enterprise_linux:6::computenode
 before 0:6.0.24-52.el6_4
0:6.0.24-52.el6_4
tomcat6-jsp-2.1-api
Red Hat:enterprise_linux:6::computenode
 before 0:6.0.24-52.el6_4
0:6.0.24-52.el6_4
tomcat6-lib
Red Hat:enterprise_linux:6::computenode
 before 0:6.0.24-52.el6_4
0:6.0.24-52.el6_4
tomcat6-servlet-2.5-api
Red Hat:enterprise_linux:6::computenode
 before 0:6.0.24-52.el6_4
0:6.0.24-52.el6_4
tomcat6-webapps
Red Hat:enterprise_linux:6::computenode
 before 0:6.0.24-52.el6_4
0:6.0.24-52.el6_4
tomcat6
Red Hat:enterprise_linux:6::server
 before 0:6.0.24-52.el6_4
0:6.0.24-52.el6_4
tomcat6-el-2.1-api
Red Hat:enterprise_linux:6::server
 before 0:6.0.24-52.el6_4
0:6.0.24-52.el6_4
tomcat6-jsp-2.1-api
Red Hat:enterprise_linux:6::server
 before 0:6.0.24-52.el6_4
0:6.0.24-52.el6_4
tomcat6-lib
Red Hat:enterprise_linux:6::server
 before 0:6.0.24-52.el6_4
0:6.0.24-52.el6_4
tomcat6-servlet-2.5-api
Red Hat:enterprise_linux:6::server
 before 0:6.0.24-52.el6_4
0:6.0.24-52.el6_4
tomcat6-admin-webapps
Red Hat:enterprise_linux:6::server
 before 0:6.0.24-52.el6_4
0:6.0.24-52.el6_4
tomcat6-docs-webapp
Red Hat:enterprise_linux:6::server
 before 0:6.0.24-52.el6_4
0:6.0.24-52.el6_4
tomcat6-javadoc
Red Hat:enterprise_linux:6::server
 before 0:6.0.24-52.el6_4
0:6.0.24-52.el6_4
tomcat6-webapps
Red Hat:enterprise_linux:6::server
 before 0:6.0.24-52.el6_4
0:6.0.24-52.el6_4
tomcat6
Red Hat:enterprise_linux:6::workstation
 before 0:6.0.24-52.el6_4
0:6.0.24-52.el6_4
tomcat6-el-2.1-api
Red Hat:enterprise_linux:6::workstation
 before 0:6.0.24-52.el6_4
0:6.0.24-52.el6_4
tomcat6-jsp-2.1-api
Red Hat:enterprise_linux:6::workstation
 before 0:6.0.24-52.el6_4
0:6.0.24-52.el6_4
tomcat6-lib
Red Hat:enterprise_linux:6::workstation
 before 0:6.0.24-52.el6_4
0:6.0.24-52.el6_4
tomcat6-servlet-2.5-api
Red Hat:enterprise_linux:6::workstation
 before 0:6.0.24-52.el6_4
0:6.0.24-52.el6_4
tomcat6-admin-webapps
Red Hat:enterprise_linux:6::workstation
 before 0:6.0.24-52.el6_4
0:6.0.24-52.el6_4
tomcat6-docs-webapp
Red Hat:enterprise_linux:6::workstation
 before 0:6.0.24-52.el6_4
0:6.0.24-52.el6_4
tomcat6-javadoc
Red Hat:enterprise_linux:6::workstation
 before 0:6.0.24-52.el6_4
0:6.0.24-52.el6_4
tomcat6-webapps
Red Hat:enterprise_linux:6::workstation
 before 0:6.0.24-52.el6_4
0:6.0.24-52.el6_4

History

History
WhenChangedSources
2026-11-02createdCVE List, EUVD, GitHub Advisories, NVD, OSV

References

Show 45 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open