CVE-2012-3544

Apache Tomcat 6.x < 6.0.37 and 7.x < 7.0.30 - Denial of Service via Chunked Transfer Coding

Title source: llm

Description

Apache Tomcat 6.x before 6.0.37 and 7.x before 7.0.30 does not properly handle chunk extensions in chunked transfer coding, which allows remote attackers to cause a denial of service by streaming data.

References (21)

Core 21

Core References

Patch x_refsource_confirm

http://svn.apache.org/viewvc?view=revision&revision=1378702

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/59797

Patch x_refsource_confirm

http://svn.apache.org/viewvc?view=revision&revision=1378921

Vendor Advisory x_refsource_confirm

http://www.vmware.com/security/advisories/VMSA-2014-0012.html

Vendor Advisory x_refsource_confirm

http://tomcat.apache.org/security-7.html

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/534161/100/0/threaded

Patch x_refsource_confirm

http://svn.apache.org/viewvc?view=revision&revision=1476592

Patch x_refsource_confirm

http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/java/org/apache/coyote/http11/filters/ChunkedInputFilter.java?r1=1476592&r2=1476591&pathrev=1476592

Vendor Advisory x_refsource_confirm

http://tomcat.apache.org/security-6.html

Vendor Advisory x_refsource_confirm

http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html

Mailing List mailing-list x_refsource_fulldisc

http://seclists.org/fulldisclosure/2014/Dec/23

Third Party Advisory mailing-list x_refsource_bugtraq

http://archives.neohapsis.com/archives/bugtraq/2013-05/0042.html

Vendor Advisory vendor-advisory x_refsource_ubuntu

http://www.ubuntu.com/usn/USN-1841-1

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/64758

Vendor Advisory x_refsource_confirm

http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html