Düşük
CVE-2012-3544: Tomcat: hatalı girdi doğrulama
Açıklama (NVD)
Apache Tomcat 6.x before 6.0.37 and 7.x before 7.0.30 does not properly handle chunk extensions in chunked transfer coding, which allows remote attackers to cause a denial of service by streaming data.
Özet bilgiler
- Ürün
- Apache Tomcat
- EPSS
- %11,00 (yüzdelik 96)
- CWE
- CWE-20
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| apache-tomcat | 6.0 | 6.0 | — |
| apache-tomcat | 6.0.0 | 6.0.0 | — |
| apache-tomcat | 6.0.0 | 6.0.0 | — |
| apache-tomcat | 6.0.1 | 6.0.1 | — |
| apache-tomcat | 6.0.1 | 6.0.1 | — |
| apache-tomcat | 6.0.2 | 6.0.2 | — |
| apache-tomcat | 6.0.2 | 6.0.2 | — |
| apache-tomcat | 6.0.2 | 6.0.2 | — |
| apache-tomcat | 6.0.3 | 6.0.3 | — |
| apache-tomcat | 6.0.4 | 6.0.4 | — |
| apache-tomcat | 6.0.4 | 6.0.4 | — |
| apache-tomcat | 6.0.5 | 6.0.5 | — |
| apache-tomcat | 6.0.6 | 6.0.6 | — |
| apache-tomcat | 6.0.6 | 6.0.6 | — |
| apache-tomcat | 6.0.7 | 6.0.7 | — |
| apache-tomcat | 6.0.7 | 6.0.7 | — |
| apache-tomcat | 6.0.7 | 6.0.7 | — |
| apache-tomcat | 6.0.8 | 6.0.8 | — |
| apache-tomcat | 6.0.8 | 6.0.8 | — |
| apache-tomcat | 6.0.9 | 6.0.9 | — |
| apache-tomcat | 6.0.9 | 6.0.9 | — |
| apache-tomcat | 6.0.10 | 6.0.10 | — |
| apache-tomcat | 6.0.11 | 6.0.11 | — |
| apache-tomcat | 6.0.12 | 6.0.12 | — |
| apache-tomcat | 6.0.13 | 6.0.13 | — |
| apache-tomcat | 6.0.14 | 6.0.14 | — |
| apache-tomcat | 6.0.15 | 6.0.15 | — |
| apache-tomcat | 6.0.16 | 6.0.16 | — |
| apache-tomcat | 6.0.17 | 6.0.17 | — |
| apache-tomcat | 6.0.18 | 6.0.18 | — |
Kaynaklar
- NVD kaydı
- archives.neohapsis.com
- seclists.org
- svn.apache.org
- svn.apache.org
- svn.apache.org
- svn.apache.org
- tomcat.apache.org
- tomcat.apache.org
- www.oracle.com
- www.oracle.com
- www.securityfocus.com
- www.securityfocus.com
- www.securityfocus.com
- www.ubuntu.com
- www.vmware.com
- lists.apache.org
- lists.apache.org
- lists.apache.org
- lists.apache.org
- lists.apache.org
- lists.apache.org
- archives.neohapsis.com
- seclists.org
- svn.apache.org
- CWE-20