NVD

Id
39945  
Name
CVE-2013-4322  
Description
Apache Tomcat before 6.0.39, 7.x before 7.0.50, and 8.x before 8.0.0-RC10 processes chunked transfer coding without properly handling (1) a large total amount of chunked data or (2) whitespace characters in an HTTP header value within a trailer field, which allows remote attackers to cause a denial of service by streaming data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-3544.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2014-02-26  
Modified Date
2017-01-06  
Seq
2013-4322  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
203209 39945 CVE-2013-4322 http://advisories.mageia.org/MGASA-2014-0148.html  View
203210 39945 CVE-2013-4322 HPSBOV03503  View
203211 39945 CVE-2013-4322 20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities  View
203212 39945 CVE-2013-4322 http://svn.apache.org/viewvc?view=revision&revision=1521834  View
203213 39945 CVE-2013-4322 http://svn.apache.org/viewvc?view=revision&revision=1521864  View
203214 39945 CVE-2013-4322 http://svn.apache.org/viewvc?view=revision&revision=1549522  View
203215 39945 CVE-2013-4322 http://svn.apache.org/viewvc?view=revision&revision=1549523  View
203216 39945 CVE-2013-4322 http://svn.apache.org/viewvc?view=revision&revision=1556540  View
203217 39945 CVE-2013-4322 http://tomcat.apache.org/security-6.html  View
203218 39945 CVE-2013-4322 http://tomcat.apache.org/security-7.html  View
203219 39945 CVE-2013-4322 http://tomcat.apache.org/security-8.html  View
203220 39945 CVE-2013-4322 http://www-01.ibm.com/support/docview.wss?uid=swg21667883  View
203221 39945 CVE-2013-4322 http://www-01.ibm.com/support/docview.wss?uid=swg21675886  View
203222 39945 CVE-2013-4322 http://www-01.ibm.com/support/docview.wss?uid=swg21677147  View
203223 39945 CVE-2013-4322 http://www-01.ibm.com/support/docview.wss?uid=swg21678113  View
203224 39945 CVE-2013-4322 http://www-01.ibm.com/support/docview.wss?uid=swg21678231  View
203225 39945 CVE-2013-4322 DSA-3530  View
203226 39945 CVE-2013-4322 MDVSA-2015:052  View
203227 39945 CVE-2013-4322 MDVSA-2015:084  View
203228 39945 CVE-2013-4322 http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html  View
203229 39945 CVE-2013-4322 http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html  View
203230 39945 CVE-2013-4322 20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities  View
203231 39945 CVE-2013-4322 65767  View
203232 39945 CVE-2013-4322 http://www.vmware.com/security/advisories/VMSA-2014-0008.html  View
203233 39945 CVE-2013-4322 http://www.vmware.com/security/advisories/VMSA-2014-0012.html  View
203234 39945 CVE-2013-4322 https://bugzilla.redhat.com/show_bug.cgi?id=1069905  View
203235 39945 CVE-2013-4322 https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04851013  View
203236 39945 CVE-2013-4322 RHSA-2014:0686  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
24515 JVNDB-2013-006090 Apache Tomcat におけるサービス運用妨害 (DoS) の脆弱性 Apache Tomcat は、(1) 大量のチャンクデータの総量、または (2) トレーラフィールド内の HTTP ヘッダ値の空白文字を適切に処理せずに、チャンク形式転送コーディング (chunked transfer coding) を処理するため、サービス運用妨害 (DoS) 状態にされる脆弱性が存在します。 CVE-2013-4322 64264 CVE-2013-4322 39945 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006090.html 2013-12-26 2016-11-22 View