[Bug 1115053] [NEW] Parameter Handling Denial of Service in Oneiric

[Christian Kuersteiner]

*** This bug is a security vulnerability ***

Public security bug reported:

Oneiric tomcat7 (version 7.0.21-1) has the following vulnerability:

Apache Tomcat is prone to a denial-of-service vulnerability. Attacker
may leverage this issue to consume an excessive amount of CPU resources,
causing a denial-of-service condition.

See:
http://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.23

This vulnerability effects just oneiric.

** Affects: tomcat7 (Ubuntu)
     Importance: Undecided
         Status: New

** Information type changed from Private Security to Public Security

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2012-0022

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to tomcat7 in Ubuntu.
https://bugs.launchpad.net/bugs/1115053

Title:
  Parameter Handling Denial of Service in Oneiric

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/tomcat7/+bug/1115053/+subscriptions