Vulnerability Details : CVE-2010-2227

Exploit prediction scoring system (EPSS) score for CVE-2010-2227

Metasploit modules for CVE-2010-2227

• Apache Tomcat Transfer-Encoding Information Disclosure and DoS

  Disclosure Date: 2010-07-09

  First seen: 2020-04-26

  auxiliary/dos/http/apache_tomcat_transfer_encoding

  Apache Tomcat 5.5.0 through 5.5.29, 6.0.0 through 6.0.27, and 7.0.0 beta does not properly handle an invalid Transfer-Encoding header, which allows remote attackers to cause a denial of service (application outage) or obtain sensitive information via a crafted head

  More information

• Slowloris Denial of Service Attack

  Disclosure Date: 2009-06-17

  First seen: 2020-04-26

  auxiliary/dos/http/slowloris

  Slowloris tries to keep many connections to the target web server open and hold them open as long as possible. It accomplishes this by opening connections to the target web server and sending a partial request. Periodically, it will send subsequent HTTP headers, adding to-bu

  More information

CVSS scores for CVE-2010-2227

CWE ids for CVE-2010-2227

• CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
  The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.
  Assigned by: nvd@nist.gov (Primary)

References for CVE-2010-2227

Products affected by CVE-2010-2227