~ / search / GHSA-pxcx-cxq8-4mmw

GHSA-pxcx-cxq8-4mmw

Uncontrolled Resource Consumption in Apache Tomcat

Source: GitHub Advisory Database (reviewed) High CVE-2014-0230

Packages

EcosystemPackageAffectedFixed in
Maven org.apache.tomcat:tomcat >= 6.0.0, < 6.0.44 6.0.44
Maven org.apache.tomcat:tomcat >= 7.0.0, < 7.0.55 7.0.55
Maven org.apache.tomcat:tomcat >= 8.0.0, < 8.0.9 8.0.9

Details

As written in the advisory (Markdown source, shown as plain text).

Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of an entire request body, which allows remote attackers to cause a denial of service (thread consumption) via a series of aborted upload attempts.

References

External links from the advisory. They lead to third-party sites.