QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2013-4322

Back to search

CVE-2013-4322

Published: Feb 26, 2014

Modified: Aug 6, 2024

PUBLISHED

Description

Apache Tomcat before 6.0.39, 7.x before 7.0.50, and 8.x before 8.0.0-RC10 processes chunked transfer coding without properly handling (1) a large total amount of chunked data or (2) whitespace characters in an HTTP header value within a trailer field, which allows remote attackers to cause a denial of service by streaming data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-3544.

VendorProductVersions

n/a

n/a

affected
n/a

References

RHSA-2014:0686
vendor-advisory
x_refsource_REDHAT
MDVSA-2015:052
vendor-advisory
x_refsource_MANDRIVA
59724
third-party-advisory
x_refsource_SECUNIA
MDVSA-2015:084
vendor-advisory
x_refsource_MANDRIVA
DSA-3530
vendor-advisory
x_refsource_DEBIAN
59722
third-party-advisory
x_refsource_SECUNIA
59675
third-party-advisory
x_refsource_SECUNIA
USN-2130-1
vendor-advisory
x_refsource_UBUNTU
59873
third-party-advisory
x_refsource_SECUNIA
HPSBOV03503
vendor-advisory
x_refsource_HP
65767
vdb-entry
x_refsource_BID
59036
third-party-advisory
x_refsource_SECUNIA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now