Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2014-0050
HistoryFeb 07, 2014 - 12:00 a.m.

CVE-2014-0050

2014-02-0700:00:00
ubuntu.com
ubuntu.com
19

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.164 Low

EPSS

Percentile

96.0%

JSON

MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in
Apache Tomcat, JBoss Web, and other products, allows remote attackers to
cause a denial of service (infinite loop and CPU consumption) via a crafted
Content-Type header that bypasses a loop’s intended exit conditions.

Notes

Author Note
mdeslaur tomcat6 is not affected because access is limited to authenticated admins
OSVersionArchitecturePackageVersionFilename
ubuntu12.10noarchtomcat7< 7.0.30-0ubuntu1.3UNKNOWN
ubuntu13.10noarchtomcat7< 7.0.42-1ubuntu0.1UNKNOWN

Related

nessus 46
jvn 1
atlassian 3
openvas 35
mageia 2
ibm 45
prion 1
nvd 1
seebug 2
veracode 1
securityvulns 7
debian 2
debiancve 1
f5 2
redhat 13
exploitpack 1
suse 1
amazon 2
osv 2
tomcat 2
cvelist 1
fedora 2
checkpoint_advisories 1
zdt 1
github 1
cve 1
exploitdb 1
vmware 4
threatpost 1
gentoo 2
huawei 1
oraclelinux 4
ubuntu 1
centos 2
symantec 1
oracle 5
nessus
nessus
F5 Networks BIG-IP : Apache Commons FileUpload vulnerability (K15189)
2014-10-10 00:00:00
Apache Tomcat 7.0.0 < 7.0.52
2014-02-25 00:00:00
VMware vCenter Orchestrator 5.5.x < 5.5.2 DoS (VMSA-2014-0007)
2014-10-24 00:00:00
jvn
jvn
JVN#14876762: Apache Commons FileUpload vulnerable to denial-of-service (DoS)
2014-02-10 00:00:00
atlassian
atlassian
Security vulnerability in apache commons fileupload
2014-02-10 05:56:15
Security vulnerability in apache commons fileupload
2014-02-10 05:56:15
Security vulnerability in apache commons fileupload
2014-02-10 05:56:15
openvas
openvas
Fedora Update for apache-commons-fileupload FEDORA-2014-2175
2014-02-20 00:00:00
Debian Security Advisory DSA 2856-1 (libcommons-fileupload-java - denial of service)
2014-02-07 00:00:00
SUSE: Security Advisory for jakarta-commons-fileupload (SUSE-SU-2014:0548-1)
2015-10-13 00:00:00
mageia
mageia
Updated tomcat packages fix CVE-2014-0050
2014-02-28 22:59:29
Updated apache-commons-fileupload package fixes CVE-2014-0050
2014-02-28 22:57:52
ibm
ibm
Security Bulletin: Potential Denial of Service in IBM WebSphere Application Server CVE-2014-0050
2018-06-15 06:59:45
Security Bulletin: Security vulnerability exists in the open source library Apache Commons FileUpload that is shipped with and used by IBM Emptoris S
2020-11-02 19:23:22
Security Bulletin: A security vulnerability has been identified in Business Space shipped with IBM Business Monitor and WebSphere Business Monitor (CVE-2014-0050)
2018-06-15 07:00:53
prion
prion
Design/Logic Flaw
2014-04-01 06:27:00
nvd
nvd
CVE-2014-0050
2014-04-01 06:27:51
seebug
seebug
Apache Commons FileUpload and Apache Tomcat - Denial-of-Service
2014-07-01 00:00:00
Apache Commons FileUpload/Apache Tomcat拒绝服务漏洞
2014-02-13 00:00:00
veracode
veracode
Denial Of Service (DoS) By An Infinite Loop Causing CPU Consumption
2019-01-15 08:58:15
securityvulns
securityvulns
[SECURITY] CVE-2014-0050 Apache Commons FileUpload and Apache Tomcat DoS
2014-03-31 00:00:00
[security bulletin] HPSBGN03329 rev.1 - HP SDN VAN Controller, Remote Denial of Service &#40;DoS&#41;, Distributed Denial of Service &#40;DDoS&#41;
2015-05-11 00:00:00
HP SDN VAN Controller DoS
2015-05-11 00:00:00
debian
debian
[SECURITY] [DSA 2856-1] libcommons-fileupload-java security update
2014-02-07 22:59:08
[SECURITY] [DSA 2897-1] tomcat7 security update
2014-04-08 18:25:14
debiancve
debiancve
CVE-2014-0050
2014-04-01 06:27:51
f5
f5
SOL15189 - Apache Commons FileUpload vulnerability CVE-2014-0050
2014-04-18 00:00:00
K15189 : Apache Commons FileUpload vulnerability CVE-2014-0050
2015-08-15 00:00:00
redhat
redhat
(RHSA-2014:0253) Moderate: Red Hat JBoss Enterprise Application Platform 6.2.1 security update
2014-03-05 00:00:00
(RHSA-2014:0252) Moderate: Red Hat JBoss Enterprise Application Platform 6.2.1 security update
2014-03-05 18:50:05
(RHSA-2014:0459) Important: Red Hat JBoss Fuse Service Works 6.0.0 security update
2014-04-30 18:58:30
exploitpack
exploitpack
Apache Commons FileUpload and Apache Tomcat - Denial of Service
2014-02-12 00:00:00
suse
suse
Security update for jakarta-commons-fileupload (important)
2014-04-17 21:04:15
amazon
amazon
Medium: tomcat7
2014-03-24 23:36:00
Medium: tomcat6
2014-05-21 10:45:00
osv
osv
Commons FileUpload Denial of service vulnerability
2018-12-21 17:51:42
tomcat7 - security update
2014-04-08 00:00:00
tomcat
tomcat
Fixed in Apache Tomcat 7.0.52
2014-02-17 00:00:00
Fixed in Apache Tomcat 8.0.3
2014-02-11 00:00:00
cvelist
cvelist
CVE-2014-0050
2014-03-28 19:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: apache-commons-fileupload-1.3-5.fc19
2014-02-17 21:07:04
[SECURITY] Fedora 20 Update: apache-commons-fileupload-1.3-5.fc20
2014-02-17 21:06:10
checkpoint_advisories
checkpoint_advisories
Apache Tomcat FileUpload Content-Type Header Infinite Loop (CVE-2014-0050)
2014-03-16 00:00:00
zdt
zdt
Apache Commons FileUpload and Apache Tomcat Denial of Service
2014-02-12 00:00:00
github
github
Commons FileUpload Denial of service vulnerability
2018-12-21 17:51:42
cve
cve
CVE-2014-0050
2014-04-01 06:27:51
exploitdb
exploitdb
Apache Commons FileUpload and Apache Tomcat - Denial of Service
2014-02-12 00:00:00
vmware
vmware
VMware product updates address security vulnerabilities in Apache Struts library
2014-06-24 00:00:00
VMware product updates address security vulnerabilities in Apache Struts library
2014-06-24 00:00:00
VMware vSphere product updates to third party libraries
2014-09-09 00:00:00
threatpost
threatpost
VMware Patches Apache Struts Flaws in vCOPS
2014-06-25 13:59:49
gentoo
gentoo
Apache Commons FileUpload: Multiple vulnerabilities
2021-07-17 00:00:00
Apache Tomcat: Multiple vulnerabilities
2014-12-15 00:00:00
huawei
huawei
Security Advisory-Apache Struts2 vulnerability on Huawei multiple products
2014-07-07 00:00:00
oraclelinux
oraclelinux
tomcat6 security update
2014-04-23 00:00:00
tomcat security update
2014-07-20 00:00:00
tomcat6 security and bug fix update
2014-07-09 00:00:00
ubuntu
ubuntu
Tomcat vulnerabilities
2014-03-06 00:00:00
centos
centos
tomcat6 security update
2014-04-23 19:07:14
tomcat6 security update
2014-07-09 16:09:49
symantec
symantec
SA100 : Apache Tomcat Vulnerabilities
2015-07-23 08:00:00
oracle
oracle
Oracle Critical Patch Update - April 2015
2015-04-14 00:00:00
Oracle Critical Patch Update - July 2014
2014-07-15 00:00:00
Oracle Critical Patch Update - October 2014
2014-10-14 00:00:00

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.164 Low

EPSS

Percentile

96.0%

JSON
Related for UB:CVE-2014-0050
nessus46jvn1atlassian3openvas35mageia2ibm45prion1nvd1seebug2veracode1securityvulns7debian2debiancve1f52redhat13exploitpack1suse1amazon2osv2tomcat2cvelist1fedora2checkpoint_advisories1zdt1github1cve1exploitdb1vmware4threatpost1gentoo2huawei1oraclelinux4ubuntu1centos2symantec1oracle5