NVD

Id
45134  
Name
CVE-2012-3544  
Description
Apache Tomcat 6.x before 6.0.37 and 7.x before 7.0.30 does not properly handle chunk extensions in chunked transfer coding, which allows remote attackers to cause a denial of service by streaming data.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2013-06-01  
Modified Date
2014-12-11  
Seq
2012-3544  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
226500 45134 CVE-2012-3544 20130510 [SECURITY] CVE-2012-3544 Chunked transfer encoding extension size is not limited  View
226501 45134 CVE-2012-3544 20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities  View
226502 45134 CVE-2012-3544 http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/java/org/apache/coyote/http11/filters/ChunkedInputFilter.java?r1=1476592&r2=1476591&pathrev=1476592  View
226503 45134 CVE-2012-3544 http://svn.apache.org/viewvc?view=revision&revision=1378702  View
226504 45134 CVE-2012-3544 http://svn.apache.org/viewvc?view=revision&revision=1378921  View
226505 45134 CVE-2012-3544 http://svn.apache.org/viewvc?view=revision&revision=1476592  View
226506 45134 CVE-2012-3544 http://tomcat.apache.org/security-6.html  View
226507 45134 CVE-2012-3544 http://tomcat.apache.org/security-7.html  View
226508 45134 CVE-2012-3544 http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html  View
226509 45134 CVE-2012-3544 http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html  View
226510 45134 CVE-2012-3544 20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities  View
226511 45134 CVE-2012-3544 59797  View
226512 45134 CVE-2012-3544 64758  View
226513 45134 CVE-2012-3544 USN-1841-1  View
226514 45134 CVE-2012-3544 http://www.vmware.com/security/advisories/VMSA-2014-0012.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30290 JVNDB-2012-005998 Apache Tomcat におけるサービス運用妨害 (DoS) の脆弱性 Apache Tomcat は、チャンク転送コーディング (chunked transfer coding) のチャンク拡張 (chunk extension) を適切に処理しないため、サービス運用妨害 (DoS) 状態にされる脆弱性が存在します。 CVE-2012-3544 56782 CVE-2012-3544 45134 5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005998.html 2012-09-06 2016-08-02 View