CVE-2011-4858

Apache Tomcat < 5.5.35 - Resource Management Error

Title source: rule

Description

Apache Tomcat before 5.5.35, 6.x before 6.0.35, and 7.x before 7.0.23 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.

Exploits (1)

exploitdb WORKING POC
phpwebappsphp
https://www.exploit-db.com/exploits/2012

References (26)

... and 6 more

Scores

EPSS 0.7660
EPSS Percentile 99.0%

Details

CWE
CWE-399
Status published
Products (50)
apache/tomcat 5.5.35
apache/tomcat 6.0.0
apache/tomcat 6.0.1
apache/tomcat 6.0.2
apache/tomcat 6.0.3
apache/tomcat 6.0.4
apache/tomcat 6.0.5
apache/tomcat 6.0.6
apache/tomcat 6.0.7
apache/tomcat 6.0.8
... and 40 more
Published Jan 05, 2012
Tracked Since Feb 18, 2026