CVE Intelligence

Maven Org.apache.tomcat:tomcat-coyote vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Maven Org.apache.tomcat:tomcat-coyote: 2 record(s), with affected versions and fixes.

CVE-2023-44487 High · 7.5 KEV Urgent · 73 Public exploit CWE-400 Oct 10, 2023
HTTP/2 Rapid Reset Attack Vulnerability
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2014-0075 Medium · 5.0 CWE-189 May 31, 2014
Integer Overflow or Wraparound in Apache Tomcat
Integer overflow in the parseChunkHeader function in java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 allows remote attackers to cause a denial of service (resource consumption) via a malformed chunk size in chunked transfer coding of a request during the streaming of data.