Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of an entire request body, which allows remote attackers to cause a denial of service (thread consumption) via a series of aborted upload attempts.
Project Subscriptions
Advisories
| Source | ID | Title |
|---|---|---|
Debian DLA |
DLA-232-1 | tomcat6 security update |
Debian DSA |
DSA-3447-1 | tomcat7 security update |
Debian DSA |
DSA-3530-1 | tomcat6 security update |
EUVD |
EUVD-2022-4851 | Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of an entire request body, which allows remote attackers to cause a denial of service (thread consumption) via a series of aborted upload attempts. |
Github GHSA |
GHSA-pxcx-cxq8-4mmw | Uncontrolled Resource Consumption in Apache Tomcat |
Ubuntu USN |
USN-2654-1 | Tomcat vulnerabilities |
Ubuntu USN |
USN-2655-1 | Tomcat vulnerabilities |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
No history.
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: redhat
Published:
Updated: 2024-08-06T09:05:39.368Z
Reserved: 2013-12-03T00:00:00.000Z
Link: CVE-2014-0230
No data.
Status : Deferred
Published: 2015-06-07T23:59:02.690
Modified: 2025-04-12T10:46:40.837
Link: CVE-2014-0230
OpenCVE Enrichment
No data.
Debian DLA
Debian DSA
EUVD
Github GHSA
Ubuntu USN