Description
java/org/apache/coyote/http11/InternalNioInputBuffer.java in the HTTP NIO connector in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.28 does not properly restrict the request-header size, which allows remote attackers to cause a denial of service (memory consumption) via a large amount of header data.
Remediation
References
Related Vulnerabilities
WordPress 3.8.4 Multiple Vulnerabilities (3.8 - 3.8.4)
Oracle JRE CVE-2012-5088 Vulnerability (CVE-2012-5088)
WordPress 6.1.x Multiple Vulnerabilities (6.1 - 6.1.1)
WordPress Plugin Really Simple Share Cross-Site Request Forgery (2.9.9)
LimeSurvey Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2018-1000658)