4.3

CVE-2013-4322

Apache Tomcat before 6.0.39, 7.x before 7.0.50, and 8.x before 8.0.0-RC10 processes chunked transfer coding without properly handling (1) a large total amount of chunked data or (2) whitespace characters in an HTTP header value within a trailer field, which allows remote attackers to cause a denial of service by streaming data.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-3544.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apache ≫ Tomcat Version 7.0.0
Apache ≫ Tomcat Version 7.0.0 Update beta
Apache ≫ Tomcat Version 7.0.1
Apache ≫ Tomcat Version 7.0.2
Apache ≫ Tomcat Version 7.0.2 Update beta
Apache ≫ Tomcat Version 7.0.3
Apache ≫ Tomcat Version 7.0.4
Apache ≫ Tomcat Version 7.0.4 Update beta
Apache ≫ Tomcat Version 7.0.10
Apache ≫ Tomcat Version 7.0.11
Apache ≫ Tomcat Version 7.0.12
Apache ≫ Tomcat Version 7.0.13
Apache ≫ Tomcat Version 7.0.14
Apache ≫ Tomcat Version 7.0.15
Apache ≫ Tomcat Version 7.0.16
Apache ≫ Tomcat Version 7.0.17
Apache ≫ Tomcat Version 7.0.18
Apache ≫ Tomcat Version 7.0.19
Apache ≫ Tomcat Version 7.0.20
Apache ≫ Tomcat Version 7.0.21
Apache ≫ Tomcat Version 7.0.22
Apache ≫ Tomcat Version 7.0.23
Apache ≫ Tomcat Version 7.0.24
Apache ≫ Tomcat Version 7.0.25
Apache ≫ Tomcat Version 7.0.26
Apache ≫ Tomcat Version 7.0.27
Apache ≫ Tomcat Version 7.0.28
Apache ≫ Tomcat Version 7.0.29
Apache ≫ Tomcat Version 7.0.30
Apache ≫ Tomcat Version 7.0.31
Apache ≫ Tomcat Version 7.0.32
Apache ≫ Tomcat Version 7.0.33
Apache ≫ Tomcat Version 7.0.34
Apache ≫ Tomcat Version 7.0.35
Apache ≫ Tomcat Version 7.0.36
Apache ≫ Tomcat Version 7.0.37
Apache ≫ Tomcat Version 7.0.38
Apache ≫ Tomcat Version 7.0.39
Apache ≫ Tomcat Version 7.0.40
Apache ≫ Tomcat Version 7.0.41
Apache ≫ Tomcat Version 7.0.42
Apache ≫ Tomcat Version 7.0.43
Apache ≫ Tomcat Version 7.0.44
Apache ≫ Tomcat Version 7.0.45
Apache ≫ Tomcat Version 7.0.46
Apache ≫ Tomcat Version 7.0.50
Apache ≫ Tomcat Version <= 6.0.37
Apache ≫ Tomcat Version 1.1.3
Apache ≫ Tomcat Version 3.0
Apache ≫ Tomcat Version 3.1
Apache ≫ Tomcat Version 3.1.1
Apache ≫ Tomcat Version 3.2
Apache ≫ Tomcat Version 3.2.1
Apache ≫ Tomcat Version 3.2.2
Apache ≫ Tomcat Version 3.2.2 Update beta2
Apache ≫ Tomcat Version 3.2.3
Apache ≫ Tomcat Version 3.2.4
Apache ≫ Tomcat Version 3.3
Apache ≫ Tomcat Version 3.3.1
Apache ≫ Tomcat Version 3.3.1a
Apache ≫ Tomcat Version 3.3.2
Apache ≫ Tomcat Version 4
Apache ≫ Tomcat Version 4.0.0
Apache ≫ Tomcat Version 4.0.1
Apache ≫ Tomcat Version 4.0.2
Apache ≫ Tomcat Version 4.0.3
Apache ≫ Tomcat Version 4.0.4
Apache ≫ Tomcat Version 4.0.5
Apache ≫ Tomcat Version 4.0.6
Apache ≫ Tomcat Version 4.1.0
Apache ≫ Tomcat Version 4.1.1
Apache ≫ Tomcat Version 4.1.2
Apache ≫ Tomcat Version 4.1.3
Apache ≫ Tomcat Version 4.1.3 Update beta
Apache ≫ Tomcat Version 4.1.9 Update beta
Apache ≫ Tomcat Version 4.1.10
Apache ≫ Tomcat Version 4.1.12
Apache ≫ Tomcat Version 4.1.15
Apache ≫ Tomcat Version 4.1.24
Apache ≫ Tomcat Version 4.1.28
Apache ≫ Tomcat Version 4.1.29
Apache ≫ Tomcat Version 4.1.31
Apache ≫ Tomcat Version 4.1.36
Apache ≫ Tomcat Version 5
Apache ≫ Tomcat Version 5.0.0
Apache ≫ Tomcat Version 5.0.1
Apache ≫ Tomcat Version 5.0.2
Apache ≫ Tomcat Version 5.0.3
Apache ≫ Tomcat Version 5.0.4
Apache ≫ Tomcat Version 5.0.5
Apache ≫ Tomcat Version 5.0.6
Apache ≫ Tomcat Version 5.0.7
Apache ≫ Tomcat Version 5.0.8
Apache ≫ Tomcat Version 5.0.9
Apache ≫ Tomcat Version 5.0.10
Apache ≫ Tomcat Version 5.0.11
Apache ≫ Tomcat Version 5.0.12
Apache ≫ Tomcat Version 5.0.13
Apache ≫ Tomcat Version 5.0.14
Apache ≫ Tomcat Version 5.0.15
Apache ≫ Tomcat Version 5.0.16
Apache ≫ Tomcat Version 5.0.17
Apache ≫ Tomcat Version 5.0.18
Apache ≫ Tomcat Version 5.0.19
Apache ≫ Tomcat Version 5.0.21
Apache ≫ Tomcat Version 5.0.22
Apache ≫ Tomcat Version 5.0.23
Apache ≫ Tomcat Version 5.0.24
Apache ≫ Tomcat Version 5.0.25
Apache ≫ Tomcat Version 5.0.26
Apache ≫ Tomcat Version 5.0.27
Apache ≫ Tomcat Version 5.0.28
Apache ≫ Tomcat Version 5.0.29
Apache ≫ Tomcat Version 5.0.30
Apache ≫ Tomcat Version 5.5.0
Apache ≫ Tomcat Version 5.5.1
Apache ≫ Tomcat Version 5.5.2
Apache ≫ Tomcat Version 5.5.3
Apache ≫ Tomcat Version 5.5.4
Apache ≫ Tomcat Version 5.5.5
Apache ≫ Tomcat Version 5.5.6
Apache ≫ Tomcat Version 5.5.7
Apache ≫ Tomcat Version 5.5.8
Apache ≫ Tomcat Version 5.5.9
Apache ≫ Tomcat Version 5.5.10
Apache ≫ Tomcat Version 5.5.11
Apache ≫ Tomcat Version 5.5.12
Apache ≫ Tomcat Version 5.5.13
Apache ≫ Tomcat Version 5.5.14
Apache ≫ Tomcat Version 5.5.15
Apache ≫ Tomcat Version 5.5.16
Apache ≫ Tomcat Version 5.5.17
Apache ≫ Tomcat Version 5.5.18
Apache ≫ Tomcat Version 5.5.19
Apache ≫ Tomcat Version 5.5.20
Apache ≫ Tomcat Version 5.5.21
Apache ≫ Tomcat Version 5.5.22
Apache ≫ Tomcat Version 5.5.23
Apache ≫ Tomcat Version 5.5.24
Apache ≫ Tomcat Version 5.5.25
Apache ≫ Tomcat Version 5.5.26
Apache ≫ Tomcat Version 5.5.27
Apache ≫ Tomcat Version 5.5.28
Apache ≫ Tomcat Version 5.5.29
Apache ≫ Tomcat Version 5.5.30
Apache ≫ Tomcat Version 5.5.31
Apache ≫ Tomcat Version 5.5.32
Apache ≫ Tomcat Version 5.5.33
Apache ≫ Tomcat Version 5.5.34
Apache ≫ Tomcat Version 5.5.35
Apache ≫ Tomcat Version 6
Apache ≫ Tomcat Version 6.0
Apache ≫ Tomcat Version 6.0.0
Apache ≫ Tomcat Version 6.0.0 Update alpha
Apache ≫ Tomcat Version 6.0.1
Apache ≫ Tomcat Version 6.0.1 Update alpha
Apache ≫ Tomcat Version 6.0.2
Apache ≫ Tomcat Version 6.0.2 Update alpha
Apache ≫ Tomcat Version 6.0.2 Update beta
Apache ≫ Tomcat Version 6.0.3
Apache ≫ Tomcat Version 6.0.10
Apache ≫ Tomcat Version 6.0.11
Apache ≫ Tomcat Version 6.0.12
Apache ≫ Tomcat Version 6.0.13
Apache ≫ Tomcat Version 6.0.14
Apache ≫ Tomcat Version 6.0.15
Apache ≫ Tomcat Version 6.0.16
Apache ≫ Tomcat Version 6.0.17
Apache ≫ Tomcat Version 6.0.18
Apache ≫ Tomcat Version 6.0.19
Apache ≫ Tomcat Version 6.0.20
Apache ≫ Tomcat Version 6.0.24
Apache ≫ Tomcat Version 6.0.26
Apache ≫ Tomcat Version 6.0.27
Apache ≫ Tomcat Version 6.0.28
Apache ≫ Tomcat Version 6.0.29
Apache ≫ Tomcat Version 6.0.30
Apache ≫ Tomcat Version 6.0.31
Apache ≫ Tomcat Version 6.0.32
Apache ≫ Tomcat Version 6.0.33
Apache ≫ Tomcat Version 6.0.35
Apache ≫ Tomcat Version 6.0.36
Apache ≫ Tomcat Version 8.0.0 Update rc1
Apache ≫ Tomcat Version 8.0.0 Update rc2
Apache ≫ Tomcat Version 8.0.0 Update rc3
Apache ≫ Tomcat Version 8.0.0 Update rc4
Apache ≫ Tomcat Version 8.0.0 Update rc5
Apache ≫ Tomcat Version 8.0.0 Update rc6
Apache ≫ Tomcat Version 8.0.0 Update rc7
Apache ≫ Tomcat Version 8.0.0 Update rc8
Apache ≫ Tomcat Version 8.0.0 Update rc9
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 9.46% 0.948
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://tomcat.apache.org/security-6.html
Vendor Advisory
https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E
https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E
https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E
https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E
https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E
https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E
http://tomcat.apache.org/security-7.html
Vendor Advisory
http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
http://seclists.org/fulldisclosure/2014/Dec/23
http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html
http://www.securityfocus.com/archive/1/534161/100/0/threaded
http://www.vmware.com/security/advisories/VMSA-2014-0012.html
http://www.vmware.com/security/advisories/VMSA-2014-0008.html
http://marc.info/?l=bugtraq&m=144498216801440&w=2
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04851013
http://advisories.mageia.org/MGASA-2014-0148.html
http://secunia.com/advisories/59036
http://secunia.com/advisories/59675
http://secunia.com/advisories/59722
http://secunia.com/advisories/59724
http://secunia.com/advisories/59873
http://tomcat.apache.org/security-8.html
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21667883
http://www-01.ibm.com/support/docview.wss?uid=swg21675886
http://www-01.ibm.com/support/docview.wss?uid=swg21677147
http://www-01.ibm.com/support/docview.wss?uid=swg21678113
http://www-01.ibm.com/support/docview.wss?uid=swg21678231
http://www.debian.org/security/2016/dsa-3530
http://www.mandriva.com/security/advisories?name=MDVSA-2015:052
http://www.ubuntu.com/usn/USN-2130-1
https://rhn.redhat.com/errata/RHSA-2014-0686.html
http://svn.apache.org/viewvc?view=revision&revision=1521834
http://svn.apache.org/viewvc?view=revision&revision=1521864
http://svn.apache.org/viewvc?view=revision&revision=1549522
http://svn.apache.org/viewvc?view=revision&revision=1549523
http://svn.apache.org/viewvc?view=revision&revision=1556540
http://www.mandriva.com/security/advisories?name=MDVSA-2015:084
http://www.securityfocus.com/bid/65767
https://bugzilla.redhat.com/show_bug.cgi?id=1069905