CVE-2012-3544: Apache Tomcat

Medium severity, CVSS 5.0. EPSS: 11% chance of exploitation in the next 30 days.

Apache Tomcat 6.x before 6.0.37 and 7.x before 7.0.30 does not properly handle chunk extensions in chunked transfer coding, which allows remote attackers to cause a denial of service by streaming data.

Affected products

• Apache Tomcat: version 6.0 only; version 6.0.0 only; version 6.0.1 only; version 6.0.2 only; version 6.0.3 only; version 6.0.4 only; …

Published 2013-06-01. Last modified 2026-10-09.