Description
java/org/apache/coyote/http11/InternalNioInputBuffer.java in the HTTP NIO connector in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.28 does not properly restrict the request-header size, which allows remote attackers to cause a denial of service (memory consumption) via a large amount of header data.
Remediation
References
Related Vulnerabilities
WordPress Plugin Sunshine Photo Cart Cross-Site Request Forgery (2.8.28)
Oracle JRE CVE-2013-0423 Vulnerability (CVE-2013-0423)
MediaWiki Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2023-45363)
PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-1130)
WordPress Plugin AgentEasy Properties Cross-Site Scripting (1.0.4)