Description

MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted Content-Type header that bypasses a loop's intended exit conditions.

Remediation

References

CVE-2014-0050

Related Vulnerabilities

Oracle JRE CVE-2012-5069 Vulnerability (CVE-2012-5069)

Drupal Core 8.5.x Multiple Vulnerabilities (8.5.0 - 8.5.14)

Drupal Core 8.7.0 Directory Traversal (8.7.0)

WordPress Plugin Add From Server Cross-Site Request Forgery (3.3.1)

WordPress Plugin Gallery-Photo Albums-Portfolio Multiple Cross-Site Scripting Vulnerabilities (1.2.29)

Severity

High

Classification

CVE-2014-0050 CWE-264

Tags

Missing Update Known Vulnerabilities