CVE-2012-0022 : 詳細

CVE-2012-0022

23.19%V4
2012-01-19
02h00 +00:00
Network
2024-08-06
18h09 +00:00
特定のCVEの通知
特定のCVEの変更情報をいち早くお届けします。
通知を管理する

CVE の説明

Apache Tomcat 5.5.x before 5.5.35, 6.x before 6.0.34, and 7.x before 7.0.23 uses an inefficient approach for handling parameters, which allows remote attackers to cause a denial of service (CPU consumption) via a request that contains many parameters and parameter values, a different vulnerability than CVE-2011-4858.

CVE の情報

関連する弱点

CWE-ID 弱点名 出典
CWE-189 Category : Numeric Errors
Weaknesses in this category are related to improper calculation or conversion of numbers.

メトリクス

メトリクス スコア 深刻度 CVSS ベクター 出典
V2 5 AV:N/AC:L/Au:N/C:N/I:N/A:P nvd@nist.gov

EPSS

EPSSは脆弱性が悪用される可能性を予測するスコアリングモデルです。

EPSSスコア

EPSSモデルは0から1(0〜100%)の確率スコアを算出します。スコアが高いほど、脆弱性が悪用される可能性が高いことを示します。

EPSSパーセンタイル

パーセンタイルはCVEをEPSSスコアで順位付けするために使用されます。例えば、EPSSスコアで95パーセンタイルにあるCVEは、他の95%のCVEよりも悪用される可能性が高いことを意味します。パーセンタイルはCVEのEPSSスコアを他のCVEと比較するために使用されます。

関連製品

構成 0

Apache>>Tomcat >> Version 5.5.0

Apache>>Tomcat >> Version 5.5.1

Apache>>Tomcat >> Version 5.5.2

Apache>>Tomcat >> Version 5.5.3

Apache>>Tomcat >> Version 5.5.4

Apache>>Tomcat >> Version 5.5.5

Apache>>Tomcat >> Version 5.5.6

Apache>>Tomcat >> Version 5.5.7

Apache>>Tomcat >> Version 5.5.8

Apache>>Tomcat >> Version 5.5.9

Apache>>Tomcat >> Version 5.5.10

Apache>>Tomcat >> Version 5.5.11

Apache>>Tomcat >> Version 5.5.12

Apache>>Tomcat >> Version 5.5.13

Apache>>Tomcat >> Version 5.5.14

Apache>>Tomcat >> Version 5.5.15

Apache>>Tomcat >> Version 5.5.16

Apache>>Tomcat >> Version 5.5.17

Apache>>Tomcat >> Version 5.5.18

Apache>>Tomcat >> Version 5.5.19

Apache>>Tomcat >> Version 5.5.20

Apache>>Tomcat >> Version 5.5.21

Apache>>Tomcat >> Version 5.5.22

Apache>>Tomcat >> Version 5.5.23

Apache>>Tomcat >> Version 5.5.24

Apache>>Tomcat >> Version 5.5.25

Apache>>Tomcat >> Version 5.5.26

Apache>>Tomcat >> Version 5.5.27

Apache>>Tomcat >> Version 5.5.28

Apache>>Tomcat >> Version 5.5.29

Apache>>Tomcat >> Version 5.5.30

Apache>>Tomcat >> Version 5.5.31

Apache>>Tomcat >> Version 5.5.32

Apache>>Tomcat >> Version 5.5.33

Apache>>Tomcat >> Version 5.5.34

構成 0

Apache>>Tomcat >> Version 6.0

Apache>>Tomcat >> Version 6.0.0

Apache>>Tomcat >> Version 6.0.1

Apache>>Tomcat >> Version 6.0.2

Apache>>Tomcat >> Version 6.0.3

Apache>>Tomcat >> Version 6.0.4

Apache>>Tomcat >> Version 6.0.5

Apache>>Tomcat >> Version 6.0.6

Apache>>Tomcat >> Version 6.0.7

Apache>>Tomcat >> Version 6.0.8

Apache>>Tomcat >> Version 6.0.9

Apache>>Tomcat >> Version 6.0.10

Apache>>Tomcat >> Version 6.0.11

Apache>>Tomcat >> Version 6.0.12

Apache>>Tomcat >> Version 6.0.13

Apache>>Tomcat >> Version 6.0.14

Apache>>Tomcat >> Version 6.0.15

Apache>>Tomcat >> Version 6.0.16

Apache>>Tomcat >> Version 6.0.17

Apache>>Tomcat >> Version 6.0.18

Apache>>Tomcat >> Version 6.0.19

Apache>>Tomcat >> Version 6.0.20

Apache>>Tomcat >> Version 6.0.24

Apache>>Tomcat >> Version 6.0.26

Apache>>Tomcat >> Version 6.0.27

Apache>>Tomcat >> Version 6.0.28

Apache>>Tomcat >> Version 6.0.29

Apache>>Tomcat >> Version 6.0.30

Apache>>Tomcat >> Version 6.0.31

Apache>>Tomcat >> Version 6.0.32

Apache>>Tomcat >> Version 6.0.33

構成 0

Apache>>Tomcat >> Version 7.0.0

Apache>>Tomcat >> Version 7.0.0

Apache>>Tomcat >> Version 7.0.1

Apache>>Tomcat >> Version 7.0.2

Apache>>Tomcat >> Version 7.0.3

Apache>>Tomcat >> Version 7.0.4

Apache>>Tomcat >> Version 7.0.5

Apache>>Tomcat >> Version 7.0.6

Apache>>Tomcat >> Version 7.0.7

Apache>>Tomcat >> Version 7.0.8

Apache>>Tomcat >> Version 7.0.9

Apache>>Tomcat >> Version 7.0.10

Apache>>Tomcat >> Version 7.0.11

Apache>>Tomcat >> Version 7.0.12

Apache>>Tomcat >> Version 7.0.13

Apache>>Tomcat >> Version 7.0.14

Apache>>Tomcat >> Version 7.0.15

Apache>>Tomcat >> Version 7.0.16

Apache>>Tomcat >> Version 7.0.17

Apache>>Tomcat >> Version 7.0.18

Apache>>Tomcat >> Version 7.0.19

Apache>>Tomcat >> Version 7.0.20

Apache>>Tomcat >> Version 7.0.21

Apache>>Tomcat >> Version 7.0.22

参考資料

http://www.debian.org/security/2012/dsa-2401
Tags : vendor-advisory, x_refsource_DEBIAN
http://rhn.redhat.com/errata/RHSA-2012-0325.html
Tags : vendor-advisory, x_refsource_REDHAT
http://marc.info/?l=bugtraq&m=136485229118404&w=2
Tags : vendor-advisory, x_refsource_HP
http://rhn.redhat.com/errata/RHSA-2012-0078.html
Tags : vendor-advisory, x_refsource_REDHAT
http://www.mandriva.com/security/advisories?name=MDVSA-2012:085
Tags : vendor-advisory, x_refsource_MANDRIVA
http://secunia.com/advisories/48791
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.securityfocus.com/bid/51447
Tags : vdb-entry, x_refsource_BID
http://rhn.redhat.com/errata/RHSA-2012-0075.html
Tags : vendor-advisory, x_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2012-0074.html
Tags : vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/48549
Tags : third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/48790
Tags : third-party-advisory, x_refsource_SECUNIA
http://rhn.redhat.com/errata/RHSA-2012-1331.html
Tags : vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/50863
Tags : third-party-advisory, x_refsource_SECUNIA
http://rhn.redhat.com/errata/RHSA-2012-0345.html
Tags : vendor-advisory, x_refsource_REDHAT
http://marc.info/?l=bugtraq&m=133294394108746&w=2
Tags : vendor-advisory, x_refsource_HP
http://marc.info/?l=bugtraq&m=132871655717248&w=2
Tags : vendor-advisory, x_refsource_HP
http://marc.info/?l=bugtraq&m=133294394108746&w=2
Tags : vendor-advisory, x_refsource_HP
http://marc.info/?l=bugtraq&m=136485229118404&w=2
Tags : vendor-advisory, x_refsource_HP
http://marc.info/?l=bugtraq&m=132871655717248&w=2
Tags : vendor-advisory, x_refsource_HP
http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
Tags : vendor-advisory, x_refsource_MANDRIVA
http://rhn.redhat.com/errata/RHSA-2012-0076.html
Tags : vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/48213
Tags : third-party-advisory, x_refsource_SECUNIA
http://rhn.redhat.com/errata/RHSA-2012-0077.html
Tags : vendor-advisory, x_refsource_REDHAT