CVE-2013-4322

Apache Tomcat before 6.0.39, 7.x before 7.0.50, and 8.x before 8.0.0-RC10 processes chunked transfer coding without properly handling (1) a large total amount of chunked data or (2) whitespace characters in an HTTP header value within a trailer field, which allows remote attackers to cause a denial of service by streaming data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-3544.

• apache tomcat 7.0.0 • apache tomcat 7.0.1 • apache tomcat 7.0.2 • apache tomcat 7.0.3 • apache tomcat 7.0.4 • apache tomcat 7.0.10 • apache tomcat 7.0.11 • apache tomcat 7.0.12 • apache tomcat 7.0.13 • apache tomcat 7.0.14 • apache tomcat 7.0.15 • apache tomcat 7.0.16 • apache tomcat 7.0.17 • apache tomcat 7.0.18 • apache tomcat 7.0.19 • apache tomcat 7.0.20 • apache tomcat 7.0.21 • apache tomcat 7.0.22 • apache tomcat 7.0.23 • apache tomcat 7.0.24 • apache tomcat 7.0.25 • apache tomcat 7.0.26 • apache tomcat 7.0.27 • apache tomcat 7.0.28 • apache tomcat 7.0.29 • apache tomcat 7.0.30 • apache tomcat 7.0.31 • apache tomcat 7.0.32 • apache tomcat 7.0.33 • apache tomcat 7.0.34 • apache tomcat 7.0.35 • apache tomcat 7.0.36 • apache tomcat 7.0.37 • apache tomcat 7.0.38 • apache tomcat 7.0.39 • apache tomcat 7.0.40 • apache tomcat 7.0.41 • apache tomcat 7.0.42 • apache tomcat 7.0.43 • apache tomcat 7.0.44 • apache tomcat 7.0.45 • apache tomcat 7.0.46 • apache tomcat 7.0.50 • apache tomcat (<= 6.0.37) • apache tomcat 1.1.3 • apache tomcat 3.0 • apache tomcat 3.1 • apache tomcat 3.1.1 • apache tomcat 3.2 • apache tomcat 3.2.1 • apache tomcat 3.2.2 • apache tomcat 3.2.3 • apache tomcat 3.2.4 • apache tomcat 3.3 • apache tomcat 3.3.1 • apache tomcat 3.3.1a • apache tomcat 3.3.2 • apache tomcat 4 • apache tomcat 4.0.0 • apache tomcat 4.0.1 … and 114 more