CVE-2014-0075

原文の説明

Integer overflow in the parseChunkHeader function in java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 allows remote attackers to cause a denial of service (resource consumption) via a malformed chunk size in chunked transfer coding of a request during the streaming of data.

影響を受けるソフトウェア

• Tomcat = 6.0.37= 7.0.2= 7.0.52= 7.0.3= 6.0.9= 6.0.27 完全一致

詳細

公開日

2014-05-31

最終更新

2026-10-15

CVSS ベクター

AV:N/AC:L/Au:N/C:N/I:N/A:P

参考資料

• cve.org/CVE-2014-0075
• nvd.nist.gov/vuln/detail/CVE-2014-0075
• svn.apache.org/viewvc?view=revision&revision=1578337
• advisories.mageia.org/MGASA-2014-0268.html
• www.novell.com/support/kb/doc.php?id=7010166
• secunia.com/advisories/59121
• rhn.redhat.com/errata/RHSA-2015-0765.html
• secunia.com/advisories/59732
• secunia.com/advisories/59835
• rhn.redhat.com/errata/RHSA-2015-0675.html
• www.vmware.com/security/advisories/VMSA-2014-0012.html
• www-01.ibm.com/support/docview.wss?uid=swg21681528
• www.mandriva.com/security/advisories?name=MDVSA-2015:052
• rhn.redhat.com/errata/RHSA-2015-0720.html