CVE-2006-7197: Apache Tomcat

High severity, CVSS 7.8. EPSS: 8.3% chance of exploitation in the next 30 days.

The AJP connector in Apache Tomcat 5.5.15 uses an incorrect length for chunks, which can cause a buffer over-read in the ajp_process_callback in mod_jk, which allows remote attackers to read portions of sensitive memory.

Affected products

• Apache Tomcat: version 5.5.15 only

Published 2007-04-25. Last modified 2026-06-16.