CVE-2014-0075

Apache Tomcat <6.0.40,7.x<7.0.53,8.x<8.0.4 - DoS

Title source: llm

Description

Integer overflow in the parseChunkHeader function in java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 allows remote attackers to cause a denial of service (resource consumption) via a malformed chunk size in chunked transfer coding of a request during the streaming of data.

Exploits (1)

nomisec WORKING POC
by LiviuPtr · poc
https://github.com/LiviuPtr/CVE-2014-0075_PoC

References (48)

... and 28 more

Scores

EPSS 0.4675
EPSS Percentile 97.7%

Details

CWE
CWE-189
Status published
Products (47)
apache/tomcat 7.0.0 (2 CPE variants)
apache/tomcat 7.0.1
apache/tomcat 7.0.2 (2 CPE variants)
apache/tomcat 7.0.3
apache/tomcat 7.0.4 (2 CPE variants)
apache/tomcat 7.0.5
apache/tomcat 7.0.6
apache/tomcat 7.0.7
apache/tomcat 7.0.8
apache/tomcat 7.0.9
... and 37 more
Published May 31, 2014
Tracked Since Feb 18, 2026