CVE-2012-3544

תיאור (מקור, אנגלית)

Apache Tomcat 6.x before 6.0.37 and 7.x before 7.0.30 does not properly handle chunk extensions in chunked transfer coding, which allows remote attackers to cause a denial of service by streaming data.

מדדים

EPSS — סבירות ניצול

11% (אחוזון 100) נכון ל-11/10/2026

CWE

CWE-20

מוצרים מושפעים

apache: tomcat

קישורים

• http://tomcat.apache.org/security-6.html Vendor Advisory
• http://tomcat.apache.org/security-7.html Vendor Advisory
• http://tomcat.apache.org/security-6.html Vendor Advisory
• http://tomcat.apache.org/security-7.html Vendor Advisory
• http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/java/org/apache/coyote/http1‮… Patch
• http://svn.apache.org/viewvc?view=revision&revision=1378702 Patch
• http://svn.apache.org/viewvc?view=revision&revision=1378921 Patch
• http://svn.apache.org/viewvc?view=revision&revision=1476592 Patch
• http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/java/org/apache/coyote/http1‮… Patch
• http://svn.apache.org/viewvc?view=revision&revision=1378702 Patch