VULNERABILITY INTELLIGENCE

CVE-2012-3544

CVSS score5 MEDIUM
EPSS probability11.00%
CISA KEVNot currently listed
Published2013-06-01
Last modified2026-10-09
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:P

Description

Apache Tomcat 6.x before 6.0.37 and 7.x before 7.0.30 does not properly handle chunk extensions in chunked transfer coding, which allows remote attackers to cause a denial of service by streaming data.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references