Intrusion PreventionHTTP.Chunked-Body.Overflow
Description
This indicates an attack attempt to exploit a Denial of Service vulnerability in Apache Tomcat.
The vulnerability is due to an error when vulnerable software handles a crafted HTTP chunked Transfer coding. A remote attacker may be able to exploit this to cause a denial of service condition on the affected system.
Affected Products
Apache Tomcat 8.0.0-RC1 to 8.0.3
Apache Tomcat 7.0.0 to 7.0.52
Apache Tomcat 6.0.0 to 6.0.39
Impact
Denial of Service: Remote attackers can crash vulnerable systems or services
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
http://tomcat.apache.org/download-80.cgi
http://tomcat.apache.org/download-70.cgi
http://tomcat.apache.org/download-60.cgi
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2019-06-26 | 14.639 | Sig Added |
| ID | 38655 |
| Created | May 08, 2015 |
| Updated | Nov 15, 2021 |
| Risk |
|
| CVE ID | CVE-2013-2028 CVE-2013-4322 CVE-2012-3544 CVE-2014-0075 CVE-2024-21762 |
| Known Exploited | Yes |
| Exploit Prediction Score | 93.17% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux |
| Affected App | Apache, Other |