GitHub Advisoryadvisory · Maven

GHSA-5wqf-h3r3-gxvh Uncontrolled Resource Consumption in Apache CXF

MEDIUM Published 2022-05-13 Modified 2023-12-21 Official page ↗
Aliases
CVE-2014-0109
Ecosystem
Maven
Packages
org.apache.cxf:cxf-core
Severity
Moderate
Weaknesses
CWE-400
Reviewed
2022-07-07

Affected packages

• Maven org.apache.cxf:cxf-core: < 2.6.14 → fixed in 2.6.14 • Maven org.apache.cxf:cxf-core: >= 2.7.0, < 2.7.11 → fixed in 2.7.11

Description

Apache CXF before 2.6.14 and 2.7.x before 2.7.11 allows remote attackers to cause a denial of service (memory consumption) via a large request with the Content-Type set to text/html to a SOAP endpoint, which triggers an error.

Related

Alias · CVE (1)

  • CVE-2014-0109 Apache CXF before 2.6.14 and 2.7.x before 2.7.11 allows remote attackers to cause a denial of service (memory consumption) via a large… vulnerability

Weakness · CWE (1)

  • CWE-400 Uncontrolled Resource Consumption weakness

References