Description

Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of an entire request body, which allows remote attackers to cause a denial of service (thread consumption) via a series of aborted upload attempts.

Remediation

References

CVE-2014-0230

Related Vulnerabilities

Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-18086)

Apache Traffic Server Uncontrolled Resource Consumption Vulnerability (CVE-2023-44487)

Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-42116)

WordPress Plugin Super Forms-Drag & Drop Form Builder Arbitrary File Upload (4.9.700)

WordPress Plugin Mass Delete Taxonomies Cross-Site Request Forgery (3.0.0)

Severity

High

Classification

CVE-2014-0230

Tags

Missing Update Known Vulnerabilities