{"id":"CVE-2011-2526","published":"2011-07-14T23:00:00Z","modified":"2024-08-06T23:00:34Z","title":"Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.19, when sendfile is enabled for the HTTP APR…","vendor":null,"product":null,"tier":"tail","description":{"text":"Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.19, when sendfile is enabled for the HTTP APR or HTTP NIO connector, does not validate certain request attributes, which allows local users to bypass intended file access restrictions or cause a denial of service (infinite loop or JVM crash) by leveraging an untrusted web application.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.00699,"percentile":0.53169,"provenance":"source"},"cwes":[],"references":[{"url":"http://secunia.com/advisories/45232","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19514","tags":["vdb-entry","signature","x_refsource_OVAL"]},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1145383","tags":["x_refsource_CONFIRM"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:156","tags":["vendor-advisory","x_refsource_MANDRIVA"]},{"url":"http://www.debian.org/security/2012/dsa-2401","tags":["vendor-advisory","x_refsource_DEBIAN"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0325.html","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://secunia.com/advisories/48308","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://marc.info/?l=bugtraq&m=136485229118404&w=2","tags":["vendor-advisory","x_refsource_HP"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0078.html","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0075.html","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0074.html","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://tomcat.apache.org/security-7.html","tags":["x_refsource_CONFIRM"]},{"url":"http://marc.info/?l=bugtraq&m=133469267822771&w=2","tags":["vendor-advisory","x_refsource_HP"]},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1146005","tags":["x_refsource_CONFIRM"]},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1145571","tags":["x_refsource_CONFIRM"]},{"url":"http://marc.info/?l=bugtraq&m=132215163318824&w=2","tags":["vendor-advisory","x_refsource_HP"]},{"url":"http://tomcat.apache.org/security-6.html","tags":["x_refsource_CONFIRM"]},{"url":"http://secunia.com/advisories/57126","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=720948","tags":["x_refsource_CONFIRM"]},{"url":"http://www.securityfocus.com/archive/1/518889/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ"]},{"url":"http://tomcat.apache.org/security-5.html","tags":["x_refsource_CONFIRM"]},{"url":"http://osvdb.org/73797","tags":["vdb-entry","x_refsource_OSVDB"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/68541","tags":["vdb-entry","x_refsource_XF"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14573","tags":["vdb-entry","signature","x_refsource_OVAL"]},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1145694","tags":["x_refsource_CONFIRM"]},{"url":"http://osvdb.org/73798","tags":["vdb-entry","x_refsource_OSVDB"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0076.html","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://www.securitytracker.com/id?1025788","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"http://marc.info/?l=bugtraq&m=139344343412337&w=2","tags":["vendor-advisory","x_refsource_HP"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0077.html","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://www.securityfocus.com/bid/48667","tags":["vdb-entry","x_refsource_BID"]},{"url":"https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]}],"priority":{"score":10.6,"factors":[{"name":"EPSS percentile","points":10.63}]},"affected":[{"ecosystem":"Maven","package":"org.apache.tomcat:tomcat","vulnerableRanges":["<5.5.34",">=6.0.0, <6.0.33",">=7.0.0, <7.0.19"],"patched":["5.5.34","6.0.33","7.0.19"],"from":["GHSA-9ggm-7897-x4mg"],"provenance":"source"}],"euvd":{"id":"EUVD-2022-3373","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-org-apache-tomcat-tomcat-cve-2007-5461","parents":[{"from":"CVE-2008-5515","to":"CVE-2011-2526","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["java/org/apache/catalina/connector/Request.java"],"commits":["https://github.com/apache/tomcat/commit/6b61911f94d6d8d49ee933c5f1882a7e7c336d2c","https://github.com/apache/tomcat/commit/2e69497fa7b1444632c6dadb64a4a82e18478ee6","https://github.com/apache/tomcat/commit/1d372c881eafd9ffe729996f8560fd5fe50cd39d"],"basis":"rarely changed file"}]},{"from":"CVE-2010-4476","to":"CVE-2011-2526","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["java/org/apache/catalina/connector/Request.java"],"commits":["https://github.com/apache/tomcat/commit/407841c426dc52a4c6b8ccd297df6c484a540056","https://github.com/apache/tomcat/commit/69ef147c4498397e8f644a0699cf588b45a05120","https://github.com/apache/tomcat/commit/2e69497fa7b1444632c6dadb64a4a82e18478ee6","https://github.com/apache/tomcat/commit/1d372c881eafd9ffe729996f8560fd5fe50cd39d"],"basis":"rarely changed file"}]}],"packageHistory":[{"cve":"CVE-2011-1582","published":"2011-05-20","fixed":"7.0.14","kev":false},{"cve":"CVE-2011-2481","published":"2011-08-15","fixed":"7.0.17","kev":false},{"cve":"CVE-2011-2204","published":"2011-06-29","fixed":"7.0.19","kev":false},{"cve":"CVE-2011-2526","published":"2011-07-14","fixed":"7.0.19","kev":false},{"cve":"CVE-2011-3190","published":"2011-08-31","fixed":"7.0.21","kev":false,"link":{"from":"CVE-2011-2526","to":"CVE-2011-3190","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Maven:org.apache.tomcat:tomcat","fromFixed":"7.0.19","toFixed":"7.0.21","daysApart":48}]}},{"cve":"CVE-2011-3375","published":"2012-01-19","fixed":"7.0.22","kev":false},{"cve":"CVE-2011-4858","published":"2012-01-05","fixed":"7.0.23","kev":false}],"package":"Maven:org.apache.tomcat:tomcat"}}