Vulnerabilidades do Maven Org.apache.tomcat:tomcat-coyote

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Maven Org.apache.tomcat:tomcat-coyote: 2 registro(s), com versões afetadas e correções.

CVE-2023-44487 Alta · 7.5 KEV Urgente · 73 Exploit público CWE-400 10/10/2023

HTTP/2 Rapid Reset Attack Vulnerability

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

CVE-2014-0075 Média · 5.0 CWE-189 31/05/2014

Integer Overflow or Wraparound in Apache Tomcat

Integer overflow in the parseChunkHeader function in java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 allows remote attackers to cause a denial of service (resource consumption) via a malformed chunk size in chunked transfer coding of a request during the streaming of data.