CVE-2010-2227
MediumApache Tomcat 5.5.0 through 5.5.29, 6.0.0 through 6.0.27, and 7.0.0 beta does not properly handle an invalid Transfer-Encoding header, which allows remote attackers to cause a denial of service (application outage) or obtain sensitive information via a crafted header that…
Published Jul 13, 2010 · Updated Apr 28, 2026 · Also known as GHSA-cxg2-49rq-8gcr
Key Facts
Patch immediately- CVE-2010-2227 is a medium-severity vulnerability (CVSS 6.4 v2) affecting Tomcat (Apache), tomcat5.5 (debian), org.apache.tomcat:tomcat (maven) and 13 more products.
- It is not listed in any known-exploited vulnerabilities catalog. No public exploit code is known.
- EPSS estimates a 55% probability of exploitation in the next 30 days.
- Fixed versions are available, including jbossweb 0:2.0.0-6.CP14.0jpp.ep1.1.el4, jbossweb 0:2.0.0-6.CP14.0jpp.ep1.1.el5, org.apache.tomcat:tomcat 5.5.30.
- Brandefense priority: patch immediately, because it is very likely to be exploited soon.
CVSS v2
6.4
AV:N/AC:L/Au:N/C:P/I:N/A:P
EPSS (30-day exploit likelihood)
55%
Higher than 99.0% of all scored CVEs
Exploited in the wild
No known
Not in a known-exploited catalog
Public exploit code
None known
Get the full CVE-2010-2227 brief as a PDF
Every affected product and fixed release, exploitation status and a first 24 hours response checklist, emailed within minutes.
Description
Apache Tomcat 5.5.0 through 5.5.29, 6.0.0 through 6.0.27, and 7.0.0 beta does not properly handle an invalid Transfer-Encoding header, which allows remote attackers to cause a denial of service (application outage) or obtain sensitive information via a crafted header that interferes with "recycling of a buffer."
Affected Products
75 affected entries in total| Product | Affected versions | Fixed in |
|---|---|---|
| TomcatApache | 5.5.0, 5.5.1, 5.5.10, 5.5.11, 5.5.12, 5.5.13, 5.5.14, 5.5.15 | n/a |
| tomcat5.5debian | See advisory | 5.5.26-5lenny2 |
| org.apache.tomcat:tomcatmaven | >= 7.0.0 | 6.0.28 |
| tomcat5-admin-webappsoracle | See advisory | 5.5.23-0jpp.9.el5_5 |
| tomcat5-common-liboracle | See advisory | 5.5.23-0jpp.9.el5_5 |
Patched Releases
jbossweb
0:2.0.0-6.CP14.0jpp.ep1.1.el4, 0:2.0.0-6.CP14.0jpp.ep1.1.el5
org.apache.tomcat:tomcat
5.5.30, 6.0.28, 7.0.2
tomcat5
0:5.5.23-0jpp_4rh.19, 0:5.5.23-0jpp.9.el5_5, 0:5.5.28-9.patch_01.jdk6.ep5.el4, 5.5.23-0jpp.9.el5_5
tomcat5-admin-webapps
5.5.23-0jpp.9.el5_5
tomcat5-common-lib
5.5.23-0jpp.9.el5_5
tomcat5-jasper
5.5.23-0jpp.9.el5_5
tomcat5-jasper-javadoc
5.5.23-0jpp.9.el5_5
tomcat5-jsp-2.0-api
5.5.23-0jpp.9.el5_5
tomcat5-jsp-2.0-api-javadoc
5.5.23-0jpp.9.el5_5
tomcat5-server-lib
5.5.23-0jpp.9.el5_5
tomcat5-servlet-2.4-api
5.5.23-0jpp.9.el5_5
tomcat5-servlet-2.4-api-javadoc
5.5.23-0jpp.9.el5_5
tomcat5-webapps
5.5.23-0jpp.9.el5_5
tomcat5.5
5.5.26-5lenny2
tomcat6
0:6.0.24-7.patch_01.jdk6.ep5.el4, 0:6.0.24-7.patch_01.jdk6.ep5.el5
Timeline
Publicly disclosed
Jul 13, 2010
Last updated
Apr 28, 2026
Weakness Type
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
References
- advisoryRHSA-2010:0584
- advisoryRHSA-2010:0693
- advisoryGHSA advisory
- advisoryhttps://nvd.nist.gov/vuln/detail/CVE-2010-2227
- advisoryhttp://tomcat.apache.org/security-5.html
FAQ
Common Questions.
Apache Tomcat 5.5.0 through 5.5.29, 6.0.0 through 6.0.27, and 7.0.0 beta does not properly handle an invalid Transfer-Encoding header, which allows remote attackers to cause a denial of service (application outage) or obtain sensitive information via a crafted header that interferes with "recycling of a buffer."
Affected: Tomcat (Apache) versions 5.5.0, 5.5.1, 5.5.10, 5.5.11, 5.5.12, 5.5.13, 5.5.14, 5.5.15; tomcat5.5 (debian); org.apache.tomcat:tomcat (maven) versions >= 7.0.0, among others. The full list is in the CVE brief.
It is not listed in any known-exploited vulnerabilities catalog.
No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
No public exploit code is known.
Fixed versions are available, including jbossweb 0:2.0.0-6.CP14.0jpp.ep1.1.el4, jbossweb 0:2.0.0-6.CP14.0jpp.ep1.1.el5, org.apache.tomcat:tomcat 5.5.30.
Brandefense priority: patch immediately, because it is very likely to be exploited soon.
Is CVE-2010-2227 Running On Your Attack Surface?
Brandefense maps vulnerabilities like this one to your internet-facing assets and tells you exactly where to patch.
Request A Demo