Description

MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted Content-Type header that bypasses a loop's intended exit conditions.

Remediation

References

CVE-2014-0050

Related Vulnerabilities

Internet Information Services Other Vulnerability (CVE-2001-0506)

Moodle Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2021-21809)

PHP Use of Password Hash With Insufficient Computational Effort Vulnerability (CVE-2023-0567)

MySQL CVE-2016-3521 Vulnerability (CVE-2016-3521)

PHP Other Vulnerability (CVE-2016-7478)

Severity

High

Tags

Missing Update Known Vulnerabilities CWE-264 CVE-2014-0050