GitHub Advisoryadvisory · Maven

GHSA-qfxv-3ppc-7qg5 Apache Tomcat Vulnerable to Denial of Service (DoS) via Improper Handling of chunk extensions

MEDIUM Published 2022-05-14 Modified 2025-04-12 Official page ↗
Aliases
CVE-2012-3544
Ecosystem
Maven
Packages
org.apache.tomcat:tomcat
Severity
Moderate
Weaknesses
CWE-20
Reviewed
2025-04-12

Affected packages

• Maven org.apache.tomcat:tomcat: >= 6.0.0, < 6.0.37 → fixed in 6.0.37 • Maven org.apache.tomcat:tomcat: >= 7.0.0, < 7.0.30 → fixed in 7.0.30

Description

Apache Tomcat 6.x before 6.0.37 and 7.x before 7.0.30 does not properly handle chunk extensions in chunked transfer coding, which allows remote attackers to cause a denial of service by streaming data.

Related

Alias · CVE (1)

  • CVE-2012-3544 Apache Tomcat 6.x before 6.0.37 and 7.x before 7.0.30 does not properly handle chunk extensions in chunked transfer coding, which allows… vulnerability

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References