CVE-2022-29885
HIGHApache Tomcat 8.5.38-8.5.78 and 10.1.0-M1-10.1.0-M14 - Denial of Service via EncryptInterceptor
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2022-29885. PoCs published by Cristian Giustini, quynhlab, iveresk.
AI-analyzed exploit summary This exploit targets CVE-2022-29885, a DoS vulnerability in Apache Tomcat 10.1 and earlier. It floods the Tomcat cluster service port (4000) with malformed packets containing 'FLT2002' followed by a large buffer of 'A' characters, causing a denial of service.
Description
The documentation of Apache Tomcat 10.1.0-M1 to 10.1.0-M14, 10.0.0-M1 to 10.0.20, 9.0.13 to 9.0.62 and 8.5.38 to 8.5.78 for the EncryptInterceptor incorrectly stated it enabled Tomcat clustering to run over an untrusted network. This was not correct. While the EncryptInterceptor does provide confidentiality and integrity protection, it does not protect against all risks associated with running over any untrusted network, particularly DoS risks.
Exploits (3)
This exploit targets CVE-2022-29885, a DoS vulnerability in Apache Tomcat 10.1 and earlier. It floods the Tomcat cluster service port (4000) with malformed packets containing 'FLT2002' followed by a large buffer of 'A' characters, causing a denial of service.
This repository contains a Go-based exploit for CVE-2022-29885, a DoS vulnerability in Apache Tomcat's EncryptInterceptor. The exploit sends a specially crafted TCP packet to trigger a denial of service in the target's NioReceiver.
This repository contains a Go-based exploit for CVE-2022-29885, a Denial of Service (DoS) vulnerability in Apache Tomcat's EncryptInterceptor when using NioReceiver for cluster communication. The exploit sends a specially crafted TCP packet to trigger the DoS condition.
References (6)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H