Description

Tomcat 4.0 through 4.1.12, using mod_jk 1.2.1 module on Apache 1.3 through 1.3.27, allows remote attackers to cause a denial of service (desynchronized communications) via an HTTP GET request with a Transfer-Encoding chunked field with invalid values.

Remediation

References

CVE-2002-2272

Related Vulnerabilities

WordPress Plugin HUSKY-Products Filter Professional for WooCommerce Multiple Vulnerabilities (1.1.9)

Nginx Out-of-bounds Read Vulnerability (CVE-2022-38890)

OpenSSL Missing Release of Memory after Effective Lifetime Vulnerability (CVE-2009-1378)

IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-29713)

Next.js Uncontrolled Recursion Vulnerability (CVE-2024-47831)

Severity

High

Tags

Missing Update Known Vulnerabilities CWE-119 CVE-2002-2272