GHSA-qfxv-3ppc-7qg5

Source

https://github.com/advisories/GHSA-qfxv-3ppc-7qg5

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-qfxv-3ppc-7qg5/GHSA-qfxv-3ppc-7qg5.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-qfxv-3ppc-7qg5

Aliases

CVE-2012-3544

Published

2022-05-14T01:10:36Z

Modified

2025-04-12T00:27:23Z

Summary

Apache Tomcat Vulnerable to Denial of Service (DoS) via Improper Handling of chunk extensions

Details

Apache Tomcat 6.x before 6.0.37 and 7.x before 7.0.30 does not properly handle chunk extensions in chunked transfer coding, which allows remote attackers to cause a denial of service by streaming data.

Database specific

{
    "cwe_ids": [
        "CWE-20"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2025-04-12T00:09:07Z",
    "nvd_published_at": "2013-06-01T14:21:00Z",
    "severity": "MODERATE"
}

References

Affected packages

Maven / org.apache.tomcat:tomcat

Package

Name: org.apache.tomcat:tomcat; View open source insights on deps.dev
Purl: pkg:maven/org.apache.tomcat/tomcat

Affected ranges

Type: ECOSYSTEM
Events: Introduced

6.0.0

Fixed

6.0.37

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-qfxv-3ppc-7qg5/GHSA-qfxv-3ppc-7qg5.json"

Maven / org.apache.tomcat:tomcat

Package

Name: org.apache.tomcat:tomcat; View open source insights on deps.dev
Purl: pkg:maven/org.apache.tomcat/tomcat

Affected ranges

Type: ECOSYSTEM
Events: Introduced

7.0.0

Fixed

7.0.30

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-qfxv-3ppc-7qg5/GHSA-qfxv-3ppc-7qg5.json"