NVD

Id
28995  
Name
CVE-2014-0050  
Description
MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted Content-Type header that bypasses a loop"s intended exit conditions.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-04-01  
Modified Date
2017-01-06  
Seq
2014-0050  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
152880 28995 CVE-2014-0050 http://advisories.mageia.org/MGASA-2014-0110.html  View
152881 28995 CVE-2014-0050 http://blog.spiderlabs.com/2014/02/cve-2014-0050-exploit-with-boundaries-loops-without-boundaries.html  View
152882 28995 CVE-2014-0050 JVN#14876762  View
152883 28995 CVE-2014-0050 JVNDB-2014-000017  View
152884 28995 CVE-2014-0050 [commons-dev] 20140206 [SECURITY] CVE-2014-0050 Apache Commons FileUpload and Apache Tomcat DoS  View
152885 28995 CVE-2014-0050 HPSBGN03329  View
152886 28995 CVE-2014-0050 http://packetstormsecurity.com/files/127215/VMware-Security-Advisory-2014-0007.html  View
152887 28995 CVE-2014-0050 RHSA-2014:0400  View
152888 28995 CVE-2014-0050 20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities  View
152889 28995 CVE-2014-0050 http://svn.apache.org/r1565143  View
152890 28995 CVE-2014-0050 http://tomcat.apache.org/security-7.html  View
152891 28995 CVE-2014-0050 http://tomcat.apache.org/security-8.html  View
152892 28995 CVE-2014-0050 http://www-01.ibm.com/support/docview.wss?uid=swg21669554  View
152893 28995 CVE-2014-0050 http://www-01.ibm.com/support/docview.wss?uid=swg21675432  View
152894 28995 CVE-2014-0050 http://www-01.ibm.com/support/docview.wss?uid=swg21676091  View
152895 28995 CVE-2014-0050 http://www-01.ibm.com/support/docview.wss?uid=swg21676092  View
152896 28995 CVE-2014-0050 http://www-01.ibm.com/support/docview.wss?uid=swg21676401  View
152897 28995 CVE-2014-0050 http://www-01.ibm.com/support/docview.wss?uid=swg21676403  View
152898 28995 CVE-2014-0050 http://www-01.ibm.com/support/docview.wss?uid=swg21676405  View
152899 28995 CVE-2014-0050 http://www-01.ibm.com/support/docview.wss?uid=swg21676410  View
152900 28995 CVE-2014-0050 http://www-01.ibm.com/support/docview.wss?uid=swg21676656  View
152901 28995 CVE-2014-0050 http://www-01.ibm.com/support/docview.wss?uid=swg21676853  View
152902 28995 CVE-2014-0050 http://www-01.ibm.com/support/docview.wss?uid=swg21677691  View
152903 28995 CVE-2014-0050 http://www-01.ibm.com/support/docview.wss?uid=swg21677724  View
152904 28995 CVE-2014-0050 http://www-01.ibm.com/support/docview.wss?uid=swg21681214  View
152905 28995 CVE-2014-0050 http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS14-015/index.html  View
152906 28995 CVE-2014-0050 http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS14-016/index.html  View
152907 28995 CVE-2014-0050 http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS14-017/index.html  View
152908 28995 CVE-2014-0050 http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-350733.htm  View
152909 28995 CVE-2014-0050 MDVSA-2015:084  View
152910 28995 CVE-2014-0050 http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html  View
152911 28995 CVE-2014-0050 http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html  View
152912 28995 CVE-2014-0050 http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html  View
152913 28995 CVE-2014-0050 http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html  View
152914 28995 CVE-2014-0050 http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html  View
152915 28995 CVE-2014-0050 http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html  View
152916 28995 CVE-2014-0050 http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html  View
152917 28995 CVE-2014-0050 20140625 NEW VMSA-2014-0007 - VMware product updates address security vulnerabilities in Apache Struts library  View
152918 28995 CVE-2014-0050 20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities  View
152919 28995 CVE-2014-0050 65400  View
152920 28995 CVE-2014-0050 http://www.vmware.com/security/advisories/VMSA-2014-0007.html  View
152921 28995 CVE-2014-0050 http://www.vmware.com/security/advisories/VMSA-2014-0008.html  View
152922 28995 CVE-2014-0050 http://www.vmware.com/security/advisories/VMSA-2014-0012.html  View
152923 28995 CVE-2014-0050 https://bugzilla.redhat.com/show_bug.cgi?id=1062337  View
152924 28995 CVE-2014-0050 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05324755  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12001 JVNDB-2014-000017 Apache Commons FileUpload におけるサービス運用妨害 (DoS) の脆弱性 Apache Commons FileUpload には、サービス運用妨害 (DoS) の脆弱性が存在します。 CVE-2014-0050 67451 CVE-2014-0050 28995 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-000017.html 2014-02-10 2016-11-22 View