Apache Tomcat contains a flaw in the handling of parameters that may allow a remote denial of service. The issue is due to an error when handling requests containing many parameters and parameter values. With a specially crafted request, a remote attacker can cause the service to exhaust all available CPU.
Classification
Location:
Remote / Network Access
Attack Type:
Denial of Service
Impact:
Loss of Availability
Solution:
Upgrade,
Third-Party Solution
Exploit:
Exploit Unknown
Disclosure:
Vendor Verified,
Third-party Verified
OSVDB:
Web Related
Solution
It has been reported that this issue has been fixed. Upgrade to version 5.5.35, 6.0.35, 7.0.23, or higher, to address this vulnerability.
