Описание
Apache Tomcat before 6.0.39, 7.x before 7.0.50, and 8.x before 8.0.0-RC10 processes chunked transfer coding without properly handling (1) a large total amount of chunked data or (2) whitespace characters in an HTTP header value within a trailer field, which allows remote attackers to cause a denial of service by streaming data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-3544.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-apps/xenial | not-affected | 6.0.39-1 |
| esm-infra-legacy/trusty | not-affected | 6.0.39-1 |
| lucid | released | 6.0.24-2ubuntu1.15 |
| precise | released | 6.0.35-1ubuntu3.4 |
| precise/esm | not-affected | 6.0.35-1ubuntu3.4 |
| quantal | ignored | end of life |
| saucy | ignored | end of life |
| trusty | not-affected | 6.0.39-1 |
| trusty/esm | not-affected | 6.0.39-1 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 7.0.52-1 |
| esm-apps/xenial | not-affected | 7.0.52-1 |
| esm-infra-legacy/trusty | not-affected | 7.0.52-1 |
| lucid | DNE | |
| precise | ignored | end of life |
| precise/esm | DNE | precise was needed |
| quantal | released | 7.0.30-0ubuntu1.3 |
| saucy | released | 7.0.42-1ubuntu0.1 |
| trusty | not-affected | 7.0.52-1 |
| trusty/esm | not-affected | 7.0.52-1 |
Показывать по
EPSS
4.3 Medium
CVSS2
Связанные уязвимости
Apache Tomcat before 6.0.39, 7.x before 7.0.50, and 8.x before 8.0.0-RC10 processes chunked transfer coding without properly handling (1) a large total amount of chunked data or (2) whitespace characters in an HTTP header value within a trailer field, which allows remote attackers to cause a denial of service by streaming data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-3544.
Apache Tomcat before 6.0.39, 7.x before 7.0.50, and 8.x before 8.0.0-RC10 processes chunked transfer coding without properly handling (1) a large total amount of chunked data or (2) whitespace characters in an HTTP header value within a trailer field, which allows remote attackers to cause a denial of service by streaming data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-3544.
Apache Tomcat before 6.0.39, 7.x before 7.0.50, and 8.x before 8.0.0-R ...
EPSS
4.3 Medium
CVSS2