CVE-2012-4387

Publication date 5 September 2012

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

Description

Apache Struts 2.0.0 through 2.3.4 allows remote attackers to cause a denial of service (CPU consumption) via a long parameter name, which is processed as an OGNL expression.

Status

Package Ubuntu Release Status
libstruts1.2-java 12.04 LTS precise
Not affected
11.10 oneiric
Not affected
11.04 natty
Not affected
10.04 LTS lucid
Not affected
8.04 LTS hardy
Not affected

References

Other references

Access our resources on patching vulnerabilities