CVE-2014-0075 in Oracle Communications Policy Management

Summary

Integer overflow in the parseChunkHeader function in java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 allows remote attackers to cause a denial of service (resource consumption) via a malformed chunk size in chunked transfer coding of a request during the streaming of data.

Reservation

12/03/2013

Disclosure

05/31/2014

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
92851	Oracle Communications Policy Management Tomcat numeric error	189	Not defined	Official fix	CVE-2014-0075
13384	Apache Tomcat Chunked HTTP Request numeric error	189	Not defined	Official fix	CVE-2014-0075

Sources

• MITRE
• NVD
• CVE Details