Description

java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat 6.x before 6.0.42, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle attempts to continue reading data after an error has occurred, which allows remote attackers to conduct HTTP request smuggling attacks or cause a denial of service (resource consumption) by streaming data with malformed chunked transfer coding.

Remediation

References

CVE-2014-0227

Related Vulnerabilities

Drupal Core 4.7.x HTTP Response Splitting (4.7.0 - 4.7.7)

Perl Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2017-12837)

Apache Tomcat Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-4431)

WordPress Plugin Favicon by RealFaviconGenerator Cross-Site Scripting (1.2.12)

MyBB Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-9414)

Severity

Medium

Classification

CVE-2014-0227

Tags

Missing Update Known Vulnerabilities