444794 – (CVE-2012-5568) www-servers/tomcat: Slowloris denial of service (CVE-2012-5568)

Bug 444794 (CVE-2012-5568) - www-servers/tomcat: Slowloris denial of service (CVE-2012-5568)

Summary: www-servers/tomcat: Slowloris denial of service (CVE-2012-5568)

Status:	RESOLVED WONTFIX

Alias:	CVE-2012-5568

Product:	Gentoo Security
Classification:	Unclassified
Component:	Vulnerabilities (show other bugs)
Hardware:	All Linux

Importance:	Normal minor (vote)
Assignee:	Gentoo Security

URL:	https://bugzilla.redhat.com/show_bug....
Whiteboard:	B3 [upstream]
Keywords:

Depends on:
Blocks:

Reported:	2012-11-26 12:28 UTC by Agostino Sarubbo
Modified:	2014-07-18 11:54 UTC (History)
CC List:	1 user (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Agostino Sarubbo gentoo-dev

2012-11-26 12:28:57 UTC

From https://bugzilla.redhat.com/show_bug.cgi?id=880011 :

The Slowloris denial of service tool has been found to affect Tomcat.

Related upstream list post:

http://mail-archives.apache.org/mod_mbox/tomcat-users/200906.mbox/%3C4A3D0884.5080309@apache.org%3E

Comment 1 GLSAMaker/CVETool Bot gentoo-dev

2012-12-02 16:11:00 UTC

CVE-2012-5568 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5568):
  Apache Tomcat through 7.0.x allows remote attackers to cause a denial of
  service (daemon outage) via partial HTTP requests, as demonstrated by
  Slowloris.

Comment 2 Yury German Gentoo Infrastructure

2014-07-17 02:57:11 UTC

http://mail-archives.apache.org/mod_mbox/tomcat-users/200906.mbox/%3C4A3D0884.5080309@apache.org%3E

The upstream post for this is that this is a normal DOS for resource exhaustion vs a vulnerability.

Red-Hat determined that they will not fix as well.

https://bugzilla.redhat.com/show_bug.cgi?id=880011

Comment 3 Yury German Gentoo Infrastructure

2014-07-18 11:54:35 UTC

After discussion with other security members, this will be dropped as "WONTFIX". To mirror other distributions.

If anyone things otherwise please advise and we will re-open.