High severityNVD Advisory· Published Apr 25, 2007· Updated Jun 16, 2026
CVE-2006-7197
CVE-2006-7197
Description
The AJP connector in Apache Tomcat 5.5.15 uses an incorrect length for chunks, which can cause a buffer over-read in the ajp_process_callback in mod_jk, which allows remote attackers to read portions of sensitive memory.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
org.apache.tomcat:tomcatMaven | <= 5.5.15 | — |
Affected products
2Patches
Vulnerability mechanics
References
20- issues.apache.org/bugzilla/show_bug.cginvdPatchWEB
- github.com/advisories/GHSA-jpqr-vh55-xqxfghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2006-7197ghsaADVISORY
- www.redhat.com/support/errata/RHSA-2008-0261.htmlnvdWEB
- www.securityfocus.com/bid/28477nvdWEB
- access.redhat.com/errata/RHSA-2008:0261ghsaWEB
- lists.apache.org/thread.html/277d42b48b6e9aef50949c0dcc79ce21693091d73da246b3c1981925%40%3Cdev.tomcat.apache.org%3EnvdWEB
- lists.apache.org/thread.html/277d42b48b6e9aef50949c0dcc79ce21693091d73da246b3c1981925@%3Cdev.tomcat.apache.org%3EghsaWEB
- lists.apache.org/thread.html/5b7a23e245c93235c503900da854a143596d901bf1a1f67e851a5de4%40%3Cdev.tomcat.apache.org%3EnvdWEB
- lists.apache.org/thread.html/5b7a23e245c93235c503900da854a143596d901bf1a1f67e851a5de4@%3Cdev.tomcat.apache.org%3EghsaWEB
- lists.apache.org/thread.html/8d2a579bbd977c225c70cb23b0ec54865fb0dab5da3eff1e060c9935%40%3Cdev.tomcat.apache.org%3EnvdWEB
- lists.apache.org/thread.html/8d2a579bbd977c225c70cb23b0ec54865fb0dab5da3eff1e060c9935@%3Cdev.tomcat.apache.org%3EghsaWEB
- lists.apache.org/thread.html/ba661b0edd913b39ff129a32d855620dd861883ade05fd88a8ce517d%40%3Cdev.tomcat.apache.org%3EnvdWEB
- lists.apache.org/thread.html/ba661b0edd913b39ff129a32d855620dd861883ade05fd88a8ce517d@%3Cdev.tomcat.apache.org%3EghsaWEB
- lists.apache.org/thread.html/r5c616dfc49156e4b06ffab842800c80f4425924d0f20c452c127a53c%40%3Cdev.tomcat.apache.org%3EnvdWEB
- lists.apache.org/thread.html/r5c616dfc49156e4b06ffab842800c80f4425924d0f20c452c127a53c@%3Cdev.tomcat.apache.org%3EghsaWEB
- lists.apache.org/thread.html/rf8e8c091182b45daa50d3557cad9b10bb4198e3f08cf8f1c66a1b08d%40%3Cdev.tomcat.apache.org%3EnvdWEB
- lists.apache.org/thread.html/rf8e8c091182b45daa50d3557cad9b10bb4198e3f08cf8f1c66a1b08d@%3Cdev.tomcat.apache.org%3EghsaWEB
- svn.apache.org/viewvcghsaWEB
- web.archive.org/web/20080511190321/http://www.securityfocus.com/bid/28477ghsaWEB
News mentions
0No linked articles in our index yet.