Lucene search

K
ubuntucveUbuntu.comUB:CVE-2014-0075
HistoryMay 31, 2014 - 12:00 a.m.

CVE-2014-0075

2014-05-3100:00:00
ubuntu.com
ubuntu.com
12

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.038 Low

EPSS

Percentile

91.8%

Integer overflow in the parseChunkHeader function in
java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache
Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 allows remote
attackers to cause a denial of service (resource consumption) via a
malformed chunk size in chunked transfer coding of a request during the
streaming of data.

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchtomcat6< 6.0.24-2ubuntu1.16UNKNOWN
ubuntu12.04noarchtomcat6< 6.0.35-1ubuntu3.5UNKNOWN
ubuntu14.04noarchtomcat6< 6.0.39-1ubuntu0.1UNKNOWN
ubuntu14.04noarchtomcat7< 7.0.52-1ubuntu0.1UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.038 Low

EPSS

Percentile

91.8%