CVE-2012-3544

MediumCVSS 5.0/10Last modified Oct 9, 2026

Description

Apache Tomcat 6.x before 6.0.37 and 7.x before 7.0.30 does not properly handle chunk extensions in chunked transfer coding, which allows remote attackers to cause a denial of service by streaming data.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:N/A:P

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published: Jun 1, 2013
Last modified: Oct 9, 2026
NVD status: Modified

Related CVEs from 2012

CVE-2012-35464.3org/apache/catalina/realm/RealmBase.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.30, when FORM authentication is used, allows CVE-2012-35476.8Stack-based buffer overflow in the cbtls_verify function in FreeRADIUS 2.1.10 through 2.1.12, when using TLS-based EAP methods, allows remot CVE-2012-35484.3The dissect_drda function in epan/dissectors/packet-drda.c in Wireshark 1.6.x through 1.6.10 and 1.8.x through 1.8.2 allows remote attackers CVE-2012-35497.8The SCTP implementation in FreeBSD 8.2 allows remote attackers to cause a denial of service (NULL pointer dereference and kernel panic) via CVE-2012-35514.3Cross-site scripting (XSS) vulnerability in crowbar_framework/app/views/support/index.html.haml in the Crowbar barclamp in Crowbar, possibly CVE-2012-35525.9Race condition in the IP implementation in the Linux kernel before 3.0 might allow remote attackers to cause a denial of service (slab corru CVE-2012-35534.0chan_skinny.c in the Skinny (aka SCCP) channel driver in Asterisk Open Source 10.x before 10.5.1 allows remote authenticated users to cause CVE-2012-35547.5SQL injection vulnerability in the RSGallery2 (com_rsgallery2) component before 2.3.0 for Joomla! 1.5.x, and before 3.2.0 for Joomla! 2.5.x,CVE-2012-35557.6Opera before 11.65 does not ensure that keyboard sequences are associated with a visible window, which makes it easier for user-assisted rem CVE-2012-35569.3Opera before 11.65 does not properly restrict the opening of a pop-up window in response to the first click of a double-click action, which CVE-2012-35575.0Opera before 11.65 does not properly restrict the reading of JSON strings, which allows remote attackers to perform cross-domain loading of CVE-2012-35582.6Opera before 11.65 does not ensure that the address field corresponds to the displayed web page during unusually timed changes to this field