Uncontrolled Resource Consumption in Apache Tomcat
Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of an entire request body, which allows remote attackers to cause a denial of service (thread consumption) via a series of aborted upload attempts.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2014-0230US | high7.8 | — | ||
Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of an entire requ… | ||||
02
references
External citations — patches, advisories, analysis.
- http://mail-archives.apache.org/mod_mbox/tomcat-announce/201505.mbox/%3C554949D1.8030904%40apache.org%3EWEB
- http://marc.info/?l=bugtraq&m=144498216801440&w=2WEB
- http://marc.info/?l=bugtraq&m=145974991225029&w=2WEB
- http://openwall.com/lists/oss-security/2015/04/10/1WEB
- http://rhn.redhat.com/errata/RHSA-2015-1622.htmlWEB
- http://rhn.redhat.com/errata/RHSA-2016-0595.htmlWEB
- http://rhn.redhat.com/errata/RHSA-2016-0596.htmlWEB
- http://rhn.redhat.com/errata/RHSA-2016-0597.htmlWEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan