Düşük

CVE-2014-0230: Tomcat: güvenlik açığı

Yayın: 8 Haziran 2015 02:59 · Güncelleme: 6 Kasım 2026 09:45

Açıklama (NVD)

Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of an entire request body, which allows remote attackers to cause a denial of service (thread consumption) via a series of aborted upload attempts.

Özet bilgiler

Ürün: Apache Tomcat
EPSS: %20,18 (yüzdelik 97)
CWE: CWE-399
Yama: Mevcut

Etkilenen sürümler

Ürün	Başlangıç	Bitiş	Düzeltildi
apache-tomcat	6.0.0	6.0.0	—
apache-tomcat	6.0.0	6.0.0	—
apache-tomcat	6.0.1	6.0.1	—
apache-tomcat	6.0.1	6.0.1	—
apache-tomcat	6.0.2	6.0.2	—
apache-tomcat	6.0.2	6.0.2	—
apache-tomcat	6.0.2	6.0.2	—
apache-tomcat	6.0.3	6.0.3	—
apache-tomcat	6.0.4	6.0.4	—
apache-tomcat	6.0.4	6.0.4	—
apache-tomcat	6.0.5	6.0.5	—
apache-tomcat	6.0.6	6.0.6	—
apache-tomcat	6.0.6	6.0.6	—
apache-tomcat	6.0.7	6.0.7	—
apache-tomcat	6.0.7	6.0.7	—
apache-tomcat	6.0.7	6.0.7	—
apache-tomcat	6.0.8	6.0.8	—
apache-tomcat	6.0.8	6.0.8	—
apache-tomcat	6.0.9	6.0.9	—
apache-tomcat	6.0.9	6.0.9	—
apache-tomcat	6.0.10	6.0.10	—
apache-tomcat	6.0.11	6.0.11	—
apache-tomcat	6.0.12	6.0.12	—
apache-tomcat	6.0.13	6.0.13	—
apache-tomcat	6.0.14	6.0.14	—
apache-tomcat	6.0.15	6.0.15	—
apache-tomcat	6.0.16	6.0.16	—
apache-tomcat	6.0.17	6.0.17	—
apache-tomcat	6.0.18	6.0.18	—
apache-tomcat	6.0.19	6.0.19	—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları