CVEvulnerability
CVE-2014-0230
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-06-07
- Last modified
- 2026-10-14
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C
- Weaknesses
- CWE-399
Description
Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of an entire request body, which allows remote attackers to cause a denial of service (thread consumption) via a series of aborted upload attempts.
Affected configurations
• apache tomcat 6.0.0
• apache tomcat 6.0.1
• apache tomcat 6.0.2
• apache tomcat 6.0.3
• apache tomcat 6.0.4
• apache tomcat 6.0.5
• apache tomcat 6.0.6
• apache tomcat 6.0.7
• apache tomcat 6.0.8
• apache tomcat 6.0.9
• apache tomcat 6.0.10
• apache tomcat 6.0.11
• apache tomcat 6.0.12
• apache tomcat 6.0.13
• apache tomcat 6.0.14
• apache tomcat 6.0.15
• apache tomcat 6.0.16
• apache tomcat 6.0.17
• apache tomcat 6.0.18
• apache tomcat 6.0.19
• apache tomcat 6.0.20
• apache tomcat 6.0.24
• apache tomcat 6.0.26
• apache tomcat 6.0.27
• apache tomcat 6.0.28
• apache tomcat 6.0.29
• apache tomcat 6.0.30
• apache tomcat 6.0.31
• apache tomcat 6.0.32
• apache tomcat 6.0.33
• apache tomcat 6.0.35
• apache tomcat 6.0.36
• apache tomcat 6.0.37
• apache tomcat 6.0.39
• apache tomcat 6.0.41
• apache tomcat 6.0.43
• apache tomcat 7.0.0
• apache tomcat 7.0.1
• apache tomcat 7.0.2
• apache tomcat 7.0.3
• apache tomcat 7.0.4
• apache tomcat 7.0.5
• apache tomcat 7.0.6
• apache tomcat 7.0.7
• apache tomcat 7.0.8
• apache tomcat 7.0.9
• apache tomcat 7.0.10
• apache tomcat 7.0.11
• apache tomcat 7.0.12
• apache tomcat 7.0.13
• apache tomcat 7.0.14
• apache tomcat 7.0.15
• apache tomcat 7.0.16
• apache tomcat 7.0.17
• apache tomcat 7.0.18
• apache tomcat 7.0.19
• apache tomcat 7.0.20
• apache tomcat 7.0.21
• apache tomcat 7.0.22
• apache tomcat 7.0.23
… and 38 more
Related
Weakness · not in database (1)
References
- http://mail-archives.apache.org/mod_mbox/tomcat-announce/201505.mbox/%3C554949D1.8030904%40apache.org%3E Vendor Advisory
- http://marc.info/?l=bugtraq&m=144498216801440&w=2 marc.info
- http://marc.info/?l=bugtraq&m=145974991225029&w=2 marc.info
- http://openwall.com/lists/oss-security/2015/04/10/1 openwall.com
- http://rhn.redhat.com/errata/RHSA-2015-1621.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2015-1622.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2015-2661.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2016-0595.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2016-0596.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2016-0597.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2016-0598.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2016-0599.html rhn.redhat.com
- http://svn.apache.org/viewvc?view=revision&revision=1603770 svn.apache.org
- http://svn.apache.org/viewvc?view=revision&revision=1603775 svn.apache.org
- http://svn.apache.org/viewvc?view=revision&revision=1603779 svn.apache.org
- http://tomcat.apache.org/security-6.html Patch, Vendor Advisory
- http://tomcat.apache.org/security-7.html Patch, Vendor Advisory
- http://tomcat.apache.org/security-8.html Patch, Vendor Advisory
- http://www.debian.org/security/2016/dsa-3447 www.debian.org
- http://www.debian.org/security/2016/dsa-3530 www.debian.org
- http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html www.oracle.com
- http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html www.oracle.com
- http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html www.oracle.com
- http://www.securityfocus.com/bid/74475 www.securityfocus.com
- http://www.ubuntu.com/usn/USN-2654-1 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-2655-1 www.ubuntu.com
- https://access.redhat.com/errata/RHSA-2015:2659 access.redhat.com
- https://access.redhat.com/errata/RHSA-2015:2660 access.redhat.com
- https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04851013 h20564.www2.hpe.com
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05054964 h20566.www2.hpe.com
- https://issues.jboss.org/browse/JWS-219 issues.jboss.org
- https://issues.jboss.org/browse/JWS-220 issues.jboss.org
- https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E lists.apache.org
- https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E lists.apache.org
- https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E lists.apache.org
- https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E lists.apache.org
- https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E lists.apache.org
- https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E lists.apache.org
- https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E lists.apache.org
- http://mail-archives.apache.org/mod_mbox/tomcat-announce/201505.mbox/%3C554949D1.8030904%40apache.org%3E Vendor Advisory
- http://marc.info/?l=bugtraq&m=144498216801440&w=2 marc.info
- http://marc.info/?l=bugtraq&m=145974991225029&w=2 marc.info
- http://openwall.com/lists/oss-security/2015/04/10/1 openwall.com
- http://rhn.redhat.com/errata/RHSA-2015-1621.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2015-1622.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2015-2661.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2016-0595.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2016-0596.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2016-0597.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2016-0598.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2016-0599.html rhn.redhat.com
- http://svn.apache.org/viewvc?view=revision&revision=1603770 svn.apache.org
- http://svn.apache.org/viewvc?view=revision&revision=1603775 svn.apache.org
- http://svn.apache.org/viewvc?view=revision&revision=1603779 svn.apache.org
- http://tomcat.apache.org/security-6.html Patch, Vendor Advisory
- http://tomcat.apache.org/security-7.html Patch, Vendor Advisory
- http://tomcat.apache.org/security-8.html Patch, Vendor Advisory
- http://www.debian.org/security/2016/dsa-3447 www.debian.org
- http://www.debian.org/security/2016/dsa-3530 www.debian.org
- http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html www.oracle.com
- http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html www.oracle.com
- http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html www.oracle.com
- http://www.securityfocus.com/bid/74475 www.securityfocus.com
- http://www.ubuntu.com/usn/USN-2654-1 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-2655-1 www.ubuntu.com
- https://access.redhat.com/errata/RHSA-2015:2659 access.redhat.com
- https://access.redhat.com/errata/RHSA-2015:2660 access.redhat.com
- https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04851013 h20564.www2.hpe.com
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05054964 h20566.www2.hpe.com
- https://issues.jboss.org/browse/JWS-219 issues.jboss.org
- https://issues.jboss.org/browse/JWS-220 issues.jboss.org
- https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E lists.apache.org
- https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E lists.apache.org
- https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E lists.apache.org
- https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E lists.apache.org
- https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E lists.apache.org
- https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E lists.apache.org
- https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E lists.apache.org