Apache Tomcat contains a flaw that may allow a remote denial of service. The issue is triggered when an attacker sends multiple crafted parameters which trigger hash collisions, and will result in loss of availability for the program via CPU consumption.
Classification
Location:
Remote / Network Access
Attack Type:
Denial of Service
Impact:
Loss of Availability
Solution:
Upgrade
Exploit:
Exploit Public
Disclosure:
Coordinated Disclosure
OSVDB:
Web Related
Solution
Upgrade to version 5.5.35 or higher, 6.0.35 or higher, or 7.0.23 or higher, as they have been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.
