Servers and applications
CVE-2012-3544 Apache Tomcat 6.x before 6.0.37 and 7.x before 7.0.30 does not properly handle chunk extensions in chunked transfer coding, which allows remote attackers to cause a denial of service by streaming data.
Severity Medium 5.0
Published 1 Jun 2013
Last changed 9 Oct 2026
Added to UpHeron 21 Oct 2026
Sources NVD Affected software Software Affected versions Apache TomcatServers and applications · cpe:a:apache:tomcat Version 7.0.28 Version 7.0.25 Version 7.0.23 Version 7.0.22 All 71 release lines Version 6.0.0-alpha Version 6.0 Version 6.0.1-alpha Version 6.0.1 Version 6.0.2-alpha Version 6.0.2-beta Version 6.0.2 Version 6.0.3 Version 6.0.4-alpha Version 6.0.4 Version 6.0.5 Version 6.0.6-alpha Version 6.0.6 Version 6.0.7-alpha Version 6.0.7-beta Version 6.0.7 Version 6.0.8-alpha Version 6.0.8 Version 6.0.9-beta Version 6.0.9 Version 6.0.10 Version 6.0.11 Version 6.0.12 Version 6.0.13 Version 6.0.14 Version 6.0.15 Version 6.0.16 Version 6.0.17 Version 6.0.18 Version 6.0.19 Version 6.0.20 Version 6.0.24 Version 6.0.26 Version 6.0.27 Version 6.0.28 Version 6.0.29 Version 6.0.30 Version 6.0.31 Version 6.0.32 Version 6.0.33 Version 6.0.35 Version 6.0.36 Version 7.0.0-beta Version 7.0.0 Version 7.0.1 Version 7.0.2-beta Version 7.0.2 Version 7.0.3 Version 7.0.4-beta Version 7.0.4 Version 7.0.5 Version 7.0.6 Version 7.0.7 Version 7.0.8 Version 7.0.9 Version 7.0.10 Version 7.0.11 Version 7.0.12 Version 7.0.13 Version 7.0.14 Version 7.0.15 Version 7.0.16 Version 7.0.17 Version 7.0.18 Version 7.0.19 Version 7.0.20 Version 7.0.21 Version 7.0.22 Version 7.0.23 Version 7.0.25 Version 7.0.28
References NVD https://nvd.nist.gov/vuln/detail/CVE-2012-3544 CVE.org https://www.cve.org/CVERecord?id=CVE-2012-3544