Apache Tomcat before 6.0.39, 7.x before 7.0.50, and 8.x before 8.0.0-RC10 processes chunked transfer coding without properly handling (1) a large total amount of chunked data or (2) whitespace characters in an HTTP header value within a …

Overview

Apache Tomcat before 6.0.39, 7.x before 7.0.50, and 8.x before 8.0.0-RC10 processes chunked transfer coding without properly handling (1) a large total amount of chunked data or (2) whitespace characters in an HTTP header value within a trailer field, which allows remote attackers to cause a denial of service by streaming data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-3544.

Affected

• tomcat = 7.0.0
• tomcat = 7.0.1
• tomcat = 7.0.2
• tomcat = 7.0.3
• tomcat = 7.0.4
• tomcat = 7.0.10
• tomcat = 7.0.11
• tomcat = 7.0.12
• tomcat = 7.0.13
• tomcat = 7.0.14
• tomcat = 7.0.15
• tomcat = 7.0.16
• tomcat = 7.0.17
• tomcat = 7.0.18
• tomcat = 7.0.19
• tomcat = 7.0.20
• tomcat = 7.0.21
• tomcat = 7.0.22
• tomcat = 7.0.23
• tomcat = 7.0.24
• tomcat = 7.0.25
• tomcat = 7.0.26
• tomcat = 7.0.27
• tomcat = 7.0.28
• tomcat = 7.0.29
• tomcat = 7.0.30
• tomcat = 7.0.31
• tomcat = 7.0.32
• tomcat = 7.0.33
• tomcat = 7.0.34
• tomcat = 7.0.35
• tomcat = 7.0.36
• tomcat = 7.0.37
• tomcat = 7.0.38
• tomcat = 7.0.39
• tomcat = 7.0.40
• tomcat = 7.0.41
• tomcat = 7.0.42
• tomcat = 7.0.43
• tomcat = 7.0.44
• tomcat = 7.0.45
• tomcat = 7.0.46
• tomcat = 7.0.50
• tomcat <= 6.0.37
• tomcat = 1.1.3
• tomcat = 3.0
• tomcat = 3.1
• tomcat = 3.1.1
• tomcat = 3.2
• tomcat = 3.2.1
• tomcat = 3.2.2
• tomcat = 3.2.3
• tomcat = 3.2.4
• tomcat = 3.3
• tomcat = 3.3.1
• tomcat = 3.3.1a
• tomcat = 3.3.2
• tomcat = 4
• tomcat = 4.0.0
• tomcat = 4.0.1
• tomcat = 4.0.2
• tomcat = 4.0.3
• tomcat = 4.0.4
• tomcat = 4.0.5
• tomcat = 4.0.6
• tomcat = 4.1.0
• tomcat = 4.1.1
• tomcat = 4.1.2
• tomcat = 4.1.3
• tomcat = 4.1.9
• tomcat = 4.1.10
• tomcat = 4.1.12
• tomcat = 4.1.15
• tomcat = 4.1.24
• tomcat = 4.1.28
• tomcat = 4.1.29
• tomcat = 4.1.31
• tomcat = 4.1.36
• tomcat = 5
• tomcat = 5.0.0
• tomcat = 5.0.1
• tomcat = 5.0.2
• tomcat = 5.0.3
• tomcat = 5.0.4
• tomcat = 5.0.5
• tomcat = 5.0.6
• tomcat = 5.0.7
• tomcat = 5.0.8
• tomcat = 5.0.9
• tomcat = 5.0.10
• tomcat = 5.0.11
• tomcat = 5.0.12
• tomcat = 5.0.13
• tomcat = 5.0.14
• tomcat = 5.0.15
• tomcat = 5.0.16
• tomcat = 5.0.17
• tomcat = 5.0.18
• tomcat = 5.0.19
• tomcat = 5.0.21

Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.