NVD

Id
18965  
Name
CVE-2016-3092  
Description
The MultipartStream class in Apache Commons Fileupload before 1.3.2, as used in Apache Tomcat 7.x before 7.0.70, 8.x before 8.0.36, 8.5.x before 8.5.3, and 9.x before 9.0.0.M7 and other products, allows remote attackers to cause a denial of service (CPU consumption) via a long boundary string.  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-19  
Published
2016-07-04  
Modified Date
2016-11-28  
Seq
2016-3092  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
105065 18965 CVE-2016-3092 JVN#89379547  View
105066 18965 CVE-2016-3092 JVNDB-2016-000121  View
105067 18965 CVE-2016-3092 openSUSE-SU-2016:2252  View
105068 18965 CVE-2016-3092 [dev] 20160621 CVE-2016-3092: Apache Commons Fileupload information disclosure vulnerability  View
105069 18965 CVE-2016-3092 http://svn.apache.org/viewvc?view=revision&revision=1743480  View
105070 18965 CVE-2016-3092 http://svn.apache.org/viewvc?view=revision&revision=1743722  View
105071 18965 CVE-2016-3092 http://svn.apache.org/viewvc?view=revision&revision=1743738  View
105072 18965 CVE-2016-3092 http://svn.apache.org/viewvc?view=revision&revision=1743742  View
105073 18965 CVE-2016-3092 http://tomcat.apache.org/security-7.html  View
105074 18965 CVE-2016-3092 http://tomcat.apache.org/security-8.html  View
105075 18965 CVE-2016-3092 http://tomcat.apache.org/security-9.html  View
105076 18965 CVE-2016-3092 DSA-3609  View
105077 18965 CVE-2016-3092 DSA-3611  View
105078 18965 CVE-2016-3092 DSA-3614  View
105079 18965 CVE-2016-3092 http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html  View
105080 18965 CVE-2016-3092 91453  View
105081 18965 CVE-2016-3092 USN-3024-1  View
105082 18965 CVE-2016-3092 USN-3027-1  View
105083 18965 CVE-2016-3092 https://bugzilla.redhat.com/show_bug.cgi?id=1349468  View
105084 18965 CVE-2016-3092 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05204371  View
105085 18965 CVE-2016-3092 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05289840  View
105086 18965 CVE-2016-3092 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05324759  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
117 JVNDB-2016-000121 Apache Commons FileUpload におけるサービス運用妨害 (DoS) の脆弱性 Apache Software Foundation が提供する Apache Commons FileUpload には、マルチパートリクエストの処理に問題があり、 結果としてサービス運用妨害 (DoS) 攻撃を受ける可能性があります。 CVE-2016-3092 89598 CVE-2016-3092 18965 5 5.3 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-000121.html 2016-06-30 2016-11-09 View