CVE-2012-5568

Apache Tomcat through 7.0.x allows remote attackers to cause a denial of service (daemon outage) via partial HTTP requests, as demonstrated by Slowloris.

EPSS

9.6% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-25)

Published

2012-11-30

Modified

2026-10-09

Record from

the NVD, synced 2026-10-19

Affected

• apache:tomcat
• opensuse:opensuse

References

• http://captainholly.wordpress.com/2009/06/19/slowloris-vs-tomcat/
• http://lists.opensuse.org/opensuse-updates/2012-12/msg00089.html
• http://lists.opensuse.org/opensuse-updates/2012-12/msg00090.html
• http://lists.opensuse.org/opensuse-updates/2013-01/msg00037.html
• http://openwall.com/lists/oss-security/2012/11/26/2

Check your stackJSON