MEDIUM
tomcat: information leak vulnerability in the handling of 'Transfer-Encoding' header
Published Jul 13, 2010
6.4
MEDIUMCVSS 2.0
EPSS 54.78%
Description
Apache Tomcat 5.5.0 through 5.5.29, 6.0.0 through 6.0.27, and 7.0.0 beta does not properly handle an invalid Transfer-Encoding header, which allows remote attackers to cause a denial of service (application outage) or obtain sensitive information via a crafted header that interferes with "recycling of a buffer."
Affected products
No data.
Configuration 1
OR
- 5.5.0
- 5.5.1
- 5.5.2
- 5.5.3
- 5.5.4
- 5.5.5
- 5.5.6
- 5.5.7
- 5.5.8
- 5.5.9
- 5.5.10
- 5.5.11
- 5.5.12
- 5.5.13
- 5.5.14
- 5.5.15
- 5.5.16
- 5.5.17
- 5.5.18
- 5.5.19
- 5.5.20
- 5.5.21
- 5.5.22
- 5.5.23
- 5.5.24
- 5.5.25
- 5.5.26
- 5.5.27
- 5.5.28
- 5.5.29
Configuration 2
OR
- 6.0.0
- 6.0.1
- 6.0.2
- 6.0.3
- 6.0.4
- 6.0.5
- 6.0.6
- 6.0.7
- 6.0.8
- 6.0.9
- 6.0.10
- 6.0.11
- 6.0.12
- 6.0.13
- 6.0.14
- 6.0.15
- 6.0.16
- 6.0.17
- 6.0.18
- 6.0.19
- 6.0.20
- 6.0.24
- 6.0.26
- 6.0.27
No data.
JBEAP 4.2.0 for RHEL 5
jbossweb-0:2.0.0-6.CP14.0jpp.ep1.1.el5
Fixed · RHSA-2010:0584
JBEWS 1.0 for RHEL 4
tomcat5-0:5.5.28-9.patch_01.jdk6.ep5.el4
Fixed · RHSA-2010:0581
JBEWS 1.0 for RHEL 4
tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el4
Fixed · RHSA-2010:0581
RHAPS Version 2 for RHEL 4
tomcat5-0:5.5.23-0jpp_4rh.17
Fixed · RHSA-2010:0582
Red Hat Certificate System 7.3
tomcat5-0:5.5.23-0jpp_4rh.19
Fixed · RHSA-2010:0693
Red Hat Developer Suite V.3
tomcat5-0:5.5.23-0jpp_21rh
Fixed · RHSA-2010:0583
Red Hat Enterprise Linux 5
tomcat5-0:5.5.23-0jpp.9.el5_5
Fixed · RHSA-2010:0580
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5
jbossweb-0:2.0.0-6.CP14.0jpp.ep1.1.el5
Fixed · RHSA-2010:0584
Red Hat JBoss Enterprise Web Server 1 for RHEL 5
tomcat5-0:5.5.28-9.patch_01.1.jdk6.ep5.el5
Fixed · RHSA-2010:0581
Red Hat JBoss Enterprise Web Server 1 for RHEL 5
tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el5
Fixed · RHSA-2010:0581
Red Hat Enterprise Linux 6
tomcat6
Not affected
| Product | Package | State | Advisory |
|---|---|---|---|
| JBEAP 4.2.0 for RHEL 5 | jbossweb-0:2.0.0-6.CP14.0jpp.ep1.1.el5 | Fixed | RHSA-2010:0584 |
| JBEWS 1.0 for RHEL 4 | tomcat5-0:5.5.28-9.patch_01.jdk6.ep5.el4 | Fixed | RHSA-2010:0581 |
| JBEWS 1.0 for RHEL 4 | tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el4 | Fixed | RHSA-2010:0581 |
| RHAPS Version 2 for RHEL 4 | tomcat5-0:5.5.23-0jpp_4rh.17 | Fixed | RHSA-2010:0582 |
| Red Hat Certificate System 7.3 | tomcat5-0:5.5.23-0jpp_4rh.19 | Fixed | RHSA-2010:0693 |
| Red Hat Developer Suite V.3 | tomcat5-0:5.5.23-0jpp_21rh | Fixed | RHSA-2010:0583 |
| Red Hat Enterprise Linux 5 | tomcat5-0:5.5.23-0jpp.9.el5_5 | Fixed | RHSA-2010:0580 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5 | jbossweb-0:2.0.0-6.CP14.0jpp.ep1.1.el5 | Fixed | RHSA-2010:0584 |
| Red Hat JBoss Enterprise Web Server 1 for RHEL 5 | tomcat5-0:5.5.28-9.patch_01.1.jdk6.ep5.el5 | Fixed | RHSA-2010:0581 |
| Red Hat JBoss Enterprise Web Server 1 for RHEL 5 | tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el5 | Fixed | RHSA-2010:0581 |
| Red Hat Enterprise Linux 6 | tomcat6 | Not affected | n/a |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Metrics
No CVSS v4.0 score for this CVE.
No CVSS v3.1 score for this CVE.
No CVSS v3.0 score for this CVE.
6.4 MEDIUM NVD
AV:N/AC:L/Au:N/C:P/I:N/A:P
Access Vector Network
Access Complexity Low
Authentication None
Confidentiality Impact Partial
Integrity Impact None
Availability Impact Partial
This CVE is not in the KEV list.
No CISA SSVC assessment for this CVE yet.
54.78% 0.54779
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.
EPSS probability 0.54779
Score over time
2022–2026- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Percentile over time
- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Table of values (18 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 1, 2026 | 54.78% (0.54779) | 98.99th | v5 (v2026.06.15) |
| Jun 15, 2026 | 54.78% (0.54779) | 98.89th | v5 (v2026.06.15) |
| Mar 6, 2026 | 80.17% (0.80174) | 99.09th | v4 (v2025.03.14) |
| Dec 13, 2025 | 74.44% (0.74437) | 98.79th | v4 (v2025.03.14) |
| Jun 24, 2025 | 64.74% (0.64738) | 98.34th | v4 (v2025.03.14) |
| May 29, 2025 | 80.88% (0.80885) | 99.09th | v4 (v2025.03.14) |
| Apr 2, 2025 | 82.25% (0.82245) | 99.18th | v4 (v2025.03.14) |
| Mar 17, 2025 | 84.59% (0.84589) | 99.29th | v4 (v2025.03.14) |
| Dec 17, 2024 | 68.92% (0.68921) | 98.17th | v3 (v2023.03.01) |
| Jul 15, 2024 | 59.40% (0.59400) | 97.79th | v3 (v2023.03.01) |
| Apr 17, 2024 | 63.65% (0.63651) | 97.81th | v3 (v2023.03.01) |
| Mar 5, 2024 | 61.04% (0.61044) | 97.69th | v3 (v2023.03.01) |
| Oct 27, 2023 | 46.29% (0.46291) | 97.04th | v3 (v2023.03.01) |
| Sep 13, 2023 | 43.10% (0.43103) | 96.88th | v3 (v2023.03.01) |
| Apr 22, 2023 | 47.16% (0.47156) | 96.89th | v3 (v2023.03.01) |
| Mar 7, 2023 | 40.55% (0.40551) | 96.63th | v3 (v2023.03.01) |
| Mar 6, 2023 | 63.47% (0.63468) | 98.98th | v2 (v2022.01.01) |
| Feb 4, 2022 | 63.47% (0.63468) | 98.74th | v2 (v2022.01.01) |
Weaknesses (1)
References (75)
- http://geronimo.apache.org/21x-security-report.html x_refsource_CONFIRM
- http://geronimo.apache.org/22x-security-report.html x_refsource_CONFIRM
- http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html vendor-advisoryx_refsource_APPLE
- http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050207.html vendor-advisoryx_refsource_FEDORA
- http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050214.html vendor-advisoryx_refsource_FEDORA
- http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html vendor-advisoryx_refsource_SUSE
- http://marc.info/?l=bugtraq&m=129070310906557&w=2 vendor-advisoryx_refsource_HP
- http://marc.info/?l=bugtraq&m=136485229118404&w=2 vendor-advisoryx_refsource_HP
- http://marc.info/?l=bugtraq&m=139344343412337&w=2 vendor-advisoryx_refsource_HP
- http://secunia.com/advisories/40813 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/41025 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/42079 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/42368 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/42454 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/43310 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/44183 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/57126 third-party-advisoryx_refsource_SECUNIA
- http://securitytracker.com/id?1024180 vdb-entryx_refsource_SECTRACK
- http://support.apple.com/kb/HT5002 x_refsource_CONFIRM
- http://svn.apache.org/viewvc?view=revision&revision=958911 x_refsource_CONFIRMPatch
- http://svn.apache.org/viewvc?view=revision&revision=958977 x_refsource_CONFIRMPatch
- http://svn.apache.org/viewvc?view=revision&revision=959428 x_refsource_CONFIRMPatch
- http://tomcat.apache.org/security-5.html x_refsource_CONFIRMVendor Advisory
- http://tomcat.apache.org/security-6.html x_refsource_CONFIRMVendor Advisory
- http://tomcat.apache.org/security-7.html x_refsource_CONFIRMVendor Advisory
- http://www.debian.org/security/2011/dsa-2207 vendor-advisoryx_refsource_DEBIAN
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:176 vendor-advisoryx_refsource_MANDRIVA
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:177 vendor-advisoryx_refsource_MANDRIVA
- http://www.novell.com/support/viewContent.do?externalId=7007274 x_refsource_CONFIRM
- http://www.novell.com/support/viewContent.do?externalId=7007275 x_refsource_CONFIRM
- http://www.redhat.com/support/errata/RHSA-2010-0580.html vendor-advisoryx_refsource_REDHAT
- http://www.redhat.com/support/errata/RHSA-2010-0581.html vendor-advisoryx_refsource_REDHAT
- http://www.redhat.com/support/errata/RHSA-2010-0582.html vendor-advisoryx_refsource_REDHAT
- http://www.redhat.com/support/errata/RHSA-2010-0583.html vendor-advisoryx_refsource_REDHAT
- http://www.securityfocus.com/archive/1/512272/100/0/threaded mailing-listx_refsource_BUGTRAQ
- http://www.securityfocus.com/archive/1/516397/100/0/threaded mailing-listx_refsource_BUGTRAQ
- http://www.securityfocus.com/bid/41544 vdb-entryx_refsource_BID
- http://www.vmware.com/security/advisories/VMSA-2011-0003.html x_refsource_CONFIRM
- http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html x_refsource_CONFIRM
- http://www.vupen.com/english/advisories/2010/1986 vdb-entryx_refsource_VUPEN
- http://www.vupen.com/english/advisories/2010/2868 vdb-entryx_refsource_VUPEN
- http://www.vupen.com/english/advisories/2010/3056 vdb-entryx_refsource_VUPEN
- https://access.redhat.com/errata/RHSA-2010:0580
- https://access.redhat.com/errata/RHSA-2010:0581
- https://access.redhat.com/errata/RHSA-2010:0582
- https://access.redhat.com/errata/RHSA-2010:0583
- https://access.redhat.com/security/cve/CVE-2010-2227 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=612799 Issue Tracking
- https://exchange.xforce.ibmcloud.com/vulnerabilities/60264 vdb-entryx_refsource_XF
- https://github.com/advisories/GHSA-cxg2-49rq-8gcr Advisory
- https://github.com/apache/tomcat/commit/40e5880dfc51517334acda5f12beacdec52ca283
- https://github.com/apache/tomcat55/commit/4faaca9353e5e3f963c7a674b3ac6a0bd1c3757e
- https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e@%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa@%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf@%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5@%3Cdev.tomcat.apache.org%3E
- https://nvd.nist.gov/vuln/detail/CVE-2010-2227
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18532 vdb-entrysignaturex_refsource_OVAL
- https://web.archive.org/web/20110213053623/http://secunia.com/advisories/43310
- https://web.archive.org/web/20110220095703/http://secunia.com/advisories/42079
- https://web.archive.org/web/20110220104410/http://secunia.com/advisories/40813
- https://web.archive.org/web/20110220104426/http://secunia.com/advisories/41025
- https://web.archive.org/web/20110220104430/http://secunia.com/advisories/42454
- https://web.archive.org/web/20110712000328/http://secunia.com/advisories/42368
- https://web.archive.org/web/20110713184518/http://secunia.com/advisories/44183
- https://web.archive.org/web/20110716102842/http://www.securityfocus.com/archive/1/512272/100/0/threaded
- https://web.archive.org/web/20110906004746/http://www.securityfocus.com/bid/41544
- https://web.archive.org/web/20111119150528/http://www.securityfocus.com/archive/1/516397/100/0/threaded
- https://web.archive.org/web/20140723000733/http://secunia.com/advisories/57126
- https://web.archive.org/web/20161107200417/http://securitytracker.com/id?1024180
- https://www.cve.org/CVERecord?id=CVE-2010-2227
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner redhat
Published Jul 13, 2010
Updated Aug 7, 2024
Reserved Jun 9, 2010
Link CVE-2010-2227
CISA Vulnrichment
GHSA-CXG2-49RQ-8GCR Updated n/a