Home

CVE-2014-0050

Description

MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted Content-Type header that bypasses a loops intended exit conditions.

Risk Information

Base Score
7.5
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
92.717

Associated Vulnerability

VulnerabilityOS Platform
Update Tomcat to 9.5.14Windows
Update Tomcat to 9.5.5Windows
Update Tomcat to 9.5.7Windows
Update Tomcat to 9.5.8Windows
Update Tomcat to 9.6.10Windows
Update Tomcat to 9.6.3Windows
Update Tomcat to 9.6.4Windows
Update Tomcat to 9.6.7Windows
Update Tomcat to 9.6.8Windows
Update Tomcat to 2.4.5Windows
Update Tomcat to 3.0.14Windows
Multiple vulnerabilities are fixed in IBM WebSphere 8.0.0.9Windows
Multiple vulnerabilities are fixed in IBM WebSphere 7.0.0.33Windows
Vulnerabilities CVE-2013-6747,CVE-2014-0050,CVE-2013-6329 are fixed in IBM WebSphere 8.5.5.2Windows
Vulnerabilities CVE-2013-2186,CVE-2014-0050 are fixed in Apache-commons-fileupload 1.3.1Windows
Multiple Vulnerabilities are affected in IBM Sterling B2B Integrator 5.2Windows
Multiple Vulnerabilities are affected in IBM UrbanCode Deploy 6.0Windows
Vulnerabilities CVE-2014-0050 are fixed in Apache - tomcat 8.0.3Windows
Vulnerabilities CVE-2014-0050 are fixed in Apache - tomcat 7.0.52Windows
Multiple Vulnerabilities are affected in IBM Operational Decision Manager 8.0Windows
Multiple Vulnerabilities are affected in IBM Operational Decision Manager 8.5Windows
Update Tomcat to 9.5.14 (For Linux)Linux
Update Tomcat to 9.5.5 (For Linux)Linux
Update Tomcat to 9.5.7 (For Linux)Linux
Update Tomcat to 9.5.8 (For Linux)Linux
Update Tomcat to 9.6.10 (For Linux)Linux
Update Tomcat to 9.6.3 (For Linux)Linux
Update Tomcat to 9.6.4 (For Linux)Linux
Update Tomcat to 9.6.7 (For Linux)Linux
Update Tomcat to 9.6.8 (For Linux)Linux
Update Tomcat to 2.4.5 (For Linux)Linux
Update Tomcat to 3.0.14 (For Linux)Linux
Vulnerabilities CVE-2013-2186,CVE-2014-0050 are fixed in Apache-commons-fileupload for Linux 1.3.1Linux
Vulnerabilities CVE-2014-0050 are fixed in Apache - tomcat for Linux 8.0.3Linux
Vulnerabilities CVE-2014-0050 are fixed in Apache - tomcat for Linux 7.0.52Linux
CVE-2014-0050NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234