CVE-2014-0227 in Communications Policy Management
要約 (英語)
java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat 6.x before 6.0.42, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle attempts to continue reading data after an error has occurred, which allows remote attackers to conduct HTTP request smuggling attacks or cause a denial of service (resource consumption) by streaming data with malformed chunked transfer coding.
Be aware that VulDB is the high quality source for vulnerability data.
予約する
2013年12月03日
公開
2015年02月15日
ステータス
確認済み
エントリ
VulDB provides additional information and datapoints for this CVE:
| 識別子 | 脆弱性 | CWE | 悪用可 | 対策 | CVE |
|---|---|---|---|---|---|
| 92887 | Oracle Communications Policy Management Tomcat | 19 | 未定義 | 公式な修正 | CVE-2014-0227 |
| 69092 | Apache Tomcat HTTP | 19 | 未実証 | 公式な修正 | CVE-2014-0227 |