NVD

Id
29137  
Name
CVE-2014-0227  
Description
java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat 6.x before 6.0.42, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle attempts to continue reading data after an error has occurred, which allows remote attackers to conduct HTTP request smuggling attacks or cause a denial of service (resource consumption) by streaming data with malformed chunked transfer coding.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-02-15  
Modified Date
2017-01-02  
Seq
2014-0227  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
154574 29137 CVE-2014-0227 http://advisories.mageia.org/MGASA-2015-0081.html  View
154575 29137 CVE-2014-0227 20150209 [SECURITY] CVE-2014-0227 Apache Tomcat Request Smuggling  View
154576 29137 CVE-2014-0227 FEDORA-2015-2109  View
154577 29137 CVE-2014-0227 SSRT102068  View
154578 29137 CVE-2014-0227 SSRT102066  View
154579 29137 CVE-2014-0227 RHSA-2015:0675  View
154580 29137 CVE-2014-0227 RHSA-2015:0720  View
154581 29137 CVE-2014-0227 RHSA-2015:0765  View
154582 29137 CVE-2014-0227 RHSA-2015:0983  View
154583 29137 CVE-2014-0227 RHSA-2015:0991  View
154584 29137 CVE-2014-0227 http://svn.apache.org/viewvc?view=revision&revision=1600984  View
154585 29137 CVE-2014-0227 http://tomcat.apache.org/security-6.html  View
154586 29137 CVE-2014-0227 http://tomcat.apache.org/security-7.html  View
154587 29137 CVE-2014-0227 http://tomcat.apache.org/security-8.html  View
154588 29137 CVE-2014-0227 DSA-3447  View
154589 29137 CVE-2014-0227 DSA-3530  View
154590 29137 CVE-2014-0227 MDVSA-2015:052  View
154591 29137 CVE-2014-0227 MDVSA-2015:053  View
154592 29137 CVE-2014-0227 MDVSA-2015:084  View
154593 29137 CVE-2014-0227 http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html  View
154594 29137 CVE-2014-0227 http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html  View
154595 29137 CVE-2014-0227 http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html  View
154596 29137 CVE-2014-0227 72717  View
154597 29137 CVE-2014-0227 USN-2655-1  View
154598 29137 CVE-2014-0227 https://bugzilla.redhat.com/show_bug.cgi?id=1109196  View
154599 29137 CVE-2014-0227 https://source.jboss.org/changelog/JBossWeb?cs=2455  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
19023 JVNDB-2014-007898 Apache Tomcat の java/org/apache/coyote/http11/filters/ChunkedInputFilter.java における HTTP リクエストスマグリング攻撃を実行される脆弱性 Apache Tomcat の java/org/apache/coyote/http11/filters/ChunkedInputFilter.java は、エラー発生後のデータの読み込みの続行の試行を適切に処理しないため、HTTP リクエストスマグリング攻撃を実行される、またはサービス運用妨害 (リソースの消費) 状態にされる脆弱性が存在します。 CVE-2014-0227 67628 CVE-2014-0227 29137 6.4 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007898.html 2014-06-24 2016-11-22 View