GitHub Advisoryadvisory · Maven

GHSA-pxcx-cxq8-4mmw Uncontrolled Resource Consumption in Apache Tomcat

HIGH Published 2022-05-14 Modified 2024-03-01 Official page ↗
Aliases
CVE-2014-0230
Ecosystem
Maven
Packages
org.apache.tomcat:tomcat
Severity
High
Weaknesses
CWE-400
Reviewed
2022-07-07

Affected packages

• Maven org.apache.tomcat:tomcat: >= 6.0.0, < 6.0.44 → fixed in 6.0.44 • Maven org.apache.tomcat:tomcat: >= 7.0.0, < 7.0.55 → fixed in 7.0.55 • Maven org.apache.tomcat:tomcat: >= 8.0.0, < 8.0.9 → fixed in 8.0.9

Description

Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of an entire request body, which allows remote attackers to cause a denial of service (thread consumption) via a series of aborted upload attempts.

Related

Alias · CVE (1)

  • CVE-2014-0230 Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs… vulnerability

Weakness · CWE (1)

  • CWE-400 Uncontrolled Resource Consumption weakness

References