Apache Tomcat CVE-2012-2733 Input Validation Bypass Vulnerability

Description

The checks that limited the permitted size of request headers were implemented too late in the request parsing process for the HTTP NIO connector. This enabled a malicious user to trigger an OutOfMemoryError by sending a single request with very large headers.

Affected Applications

Apache Tomcat

CVE References

Other References