PT-2012-4798 · Apache+1 · Apache Tomcat+1

Saran Neti · Publicado 2012-12-31 · Atualizado 2022-05-14 · CVE-2012-3544

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 6.0.0 through 6.0.36 Apache Tomcat versions 7.0.0 through 7.0.29

Description The issue allows remote attackers to cause a denial of service by streaming data due to improper handling of chunk extensions in chunked transfer coding.

Recommendations For Apache Tomcat versions 6.0.0 through 6.0.36, update to version 6.0.37 or later. For Apache Tomcat versions 7.0.0 through 7.0.29, update to version 7.0.30 or later.

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2012-3544

DSA-2725-1

DSA-2897-1

GHSA-QFXV-3PPC-7QG5

MGASA-2014-0082

RHSA-2013:1011

RHSA-2013:1012

SUSE-SU-2014_1015-1

USN-1841-1

Produtos afetados

Apache Tomcat

Suse

Referências · 44

• https://github.com/apache/tomcat · Nota
• https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113@%3Cdev.tomcat.apache.org%3E · Nota
• http://ubuntu.com/usn/usn-1841-1 · Nota
• https://cve.org/CVERecord?id=CVE-2012-3544 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2012-3544 · Nota de Segurança
• http://svn.apache.org/viewvc?view=revision&revision=1378702 · Correção
• http://svn.apache.org/viewvc?view=revision&revision=1378921 · Correção
• https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E · Nota
• http://ubuntu.com/usn/USN-1841-1 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3544 · Nota
• http://mail-archives.apache.org/mod_mbox/tomcat-announce/201305.mbox/[e-mail]%3E · Nota
• https://ubuntu.com/security/notices/USN-1841-1 · Aviso do Fabricante
• https://advisories.mageia.org/MGASA-2014-0082.html · Nota de Segurança
• https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b@%3Cdev.tomcat.apache.org%3E · Nota
• http://tomcat.apache.org/security-6.html · Aviso do Fabricante