AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2013-4322

MEDIUM · CVSS 4.3 EPSS 9.46%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2014-02-26 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2013-4322
Severity
MEDIUM
CVSS
4.3
EPSS
9.46%
Apache

Original NVD Description

Apache Tomcat before 6.0.39, 7.x before 7.0.50, and 8.x before 8.0.0-RC10 processes chunked transfer coding without properly handling (1) a large total amount of chunked data or (2) whitespace characters in an HTTP header value within a trailer field, which allows remote attackers to cause a denial of service by streaming data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-3544.