CVE-2014-0050CWE-835

CVE-2014-0050

High · published April 1, 2014

Patch now

High probability of exploitation

CVSS calls it high at 7.5. It sits in the 99.7th percentile for exploit probability.

CVSS v3.1
7.5
EPSS
83%
Percentile
99.7
In the wild
Unconfirmed
What it is

MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted Content-Type header that bypasses a loop's intended exit conditions.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.83334 · 99.7th percentile
Weakness
CWE-835 · Loop with Unreachable Exit Condition ('Infinite Loop')
Published
2014-04-01T10:27Z
Affected products (74)
ProductVersionsFixed in
oracle/retail_applicationsall versions—
oracle/retail_applicationsall versions—
oracle/retail_applicationsall versions—
oracle/retail_applicationsall versions—
oracle/retail_applicationsall versions—
oracle/retail_applicationsall versions—
oracle/retail_applicationsall versions—
oracle/retail_applicationsall versions—
apache/commons_fileupload≤ 1.3—
apache/commons_fileuploadall versions—
apache/commons_fileuploadall versions—
apache/commons_fileuploadall versions—
apache/commons_fileuploadall versions—
apache/commons_fileuploadall versions—
apache/commons_fileuploadall versions—
apache/tomcatall versions—
apache/tomcatall versions—
apache/tomcatall versions—
apache/tomcatall versions—
apache/tomcatall versions—
apache/tomcatall versions—
apache/tomcatall versions—
apache/tomcatall versions—
apache/tomcatall versions—
apache/tomcatall versions—
apache/tomcatall versions—
apache/tomcatall versions—
apache/tomcatall versions—
apache/tomcatall versions—
apache/tomcatall versions—
apache/tomcatall versions—
apache/tomcatall versions—
apache/tomcatall versions—
apache/tomcatall versions—
apache/tomcatall versions—
apache/tomcatall versions—
apache/tomcatall versions—
apache/tomcatall versions—
apache/tomcatall versions—
apache/tomcatall versions—
apache/tomcatall versions—
apache/tomcatall versions—
apache/tomcatall versions—
apache/tomcatall versions—
apache/tomcatall versions—
apache/tomcatall versions—
apache/tomcatall versions—
apache/tomcatall versions—
apache/tomcatall versions—
apache/tomcatall versions—
apache/tomcatall versions—
apache/tomcatall versions—
apache/tomcatall versions—
apache/tomcatall versions—
apache/tomcatall versions—
apache/tomcatall versions—
apache/tomcatall versions—
apache/tomcatall versions—
apache/tomcatall versions—
apache/tomcatall versions—
apache/tomcatall versions—
apache/tomcatall versions—
apache/tomcatall versions—
apache/tomcatall versions—
apache/tomcatall versions—
apache/tomcatall versions—
apache/tomcatall versions—
apache/tomcatall versions—
apache/tomcatall versions—
apache/tomcatall versions—
apache/tomcatall versions—
apache/tomcatall versions—
apache/tomcatall versions—
apache/tomcatall versions—
References (138)
http://advisories.mageia.org/MGASA-2014-0110.html · [email protected]http://blog.spiderlabs.com/2014/02/cve-2014-0050-exploit-with-boundaries-loops-without-boundaries.html · [email protected]http://jvn.jp/en/jp/JVN14876762/index.html · [email protected]http://jvndb.jvn.jp/jvndb/JVNDB-2014-000017 · [email protected]http://mail-archives.apache.org/mod_mbox/commons-dev/201402.mbox/%3C52F373FC.9030907%40apache.org%3E · [email protected]http://marc.info/?l=bugtraq&m=143136844732487&w=2 · [email protected]http://packetstormsecurity.com/files/127215/VMware-Security-Advisory-2014-0007.html · [email protected]http://rhn.redhat.com/errata/RHSA-2014-0252.html · [email protected]http://rhn.redhat.com/errata/RHSA-2014-0253.html · [email protected]http://rhn.redhat.com/errata/RHSA-2014-0400.html · [email protected]http://seclists.org/fulldisclosure/2014/Dec/23 · [email protected]http://secunia.com/advisories/57915 · [email protected]http://secunia.com/advisories/58075 · [email protected]http://secunia.com/advisories/58976 · [email protected]http://secunia.com/advisories/59039 · [email protected]http://secunia.com/advisories/59041 · [email protected]http://secunia.com/advisories/59183 · [email protected]http://secunia.com/advisories/59184 · [email protected]http://secunia.com/advisories/59185 · [email protected]http://secunia.com/advisories/59187 · [email protected]http://secunia.com/advisories/59232 · [email protected]http://secunia.com/advisories/59399 · [email protected]http://secunia.com/advisories/59492 · [email protected]http://secunia.com/advisories/59500 · [email protected]http://secunia.com/advisories/59725 · [email protected]http://secunia.com/advisories/60475 · [email protected]http://secunia.com/advisories/60753 · [email protected]http://svn.apache.org/r1565143 · [email protected]http://tomcat.apache.org/security-7.html · [email protected]http://tomcat.apache.org/security-8.html · [email protected]http://www-01.ibm.com/support/docview.wss?uid=swg21669554 · [email protected]http://www-01.ibm.com/support/docview.wss?uid=swg21675432 · [email protected]http://www-01.ibm.com/support/docview.wss?uid=swg21676091 · [email protected]http://www-01.ibm.com/support/docview.wss?uid=swg21676092 · [email protected]http://www-01.ibm.com/support/docview.wss?uid=swg21676401 · [email protected]http://www-01.ibm.com/support/docview.wss?uid=swg21676403 · [email protected]http://www-01.ibm.com/support/docview.wss?uid=swg21676405 · [email protected]http://www-01.ibm.com/support/docview.wss?uid=swg21676410 · [email protected]http://www-01.ibm.com/support/docview.wss?uid=swg21676656 · [email protected]http://www-01.ibm.com/support/docview.wss?uid=swg21676853 · [email protected]http://www-01.ibm.com/support/docview.wss?uid=swg21677691 · [email protected]http://www-01.ibm.com/support/docview.wss?uid=swg21677724 · [email protected]http://www-01.ibm.com/support/docview.wss?uid=swg21681214 · [email protected]http://www.debian.org/security/2014/dsa-2856 · [email protected]http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS14-015/index.html · [email protected]http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS14-016/index.html · [email protected]http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS14-017/index.html · [email protected]http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-350733.htm · [email protected]http://www.mandriva.com/security/advisories?name=MDVSA-2015:084 · [email protected]http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html · [email protected]http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html · [email protected]http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html · [email protected]http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html · [email protected]http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html · [email protected]http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html · [email protected]http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html · [email protected]http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html · [email protected]http://www.securityfocus.com/archive/1/532549/100/0/threaded · [email protected]http://www.securityfocus.com/archive/1/534161/100/0/threaded · [email protected]http://www.securityfocus.com/bid/65400 · [email protected]http://www.ubuntu.com/usn/USN-2130-1 · [email protected]http://www.vmware.com/security/advisories/VMSA-2014-0007.html · [email protected]http://www.vmware.com/security/advisories/VMSA-2014-0008.html · [email protected]http://www.vmware.com/security/advisories/VMSA-2014-0012.html · [email protected]https://bugzilla.redhat.com/show_bug.cgi?id=1062337 · [email protected]https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05324755 · [email protected]https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05376917 · [email protected]https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 · [email protected]https://security.gentoo.org/glsa/202107-39 · [email protected]http://advisories.mageia.org/MGASA-2014-0110.html · af854a3a-2127-422b-91ae-364da2661108http://blog.spiderlabs.com/2014/02/cve-2014-0050-exploit-with-boundaries-loops-without-boundaries.html · af854a3a-2127-422b-91ae-364da2661108http://jvn.jp/en/jp/JVN14876762/index.html · af854a3a-2127-422b-91ae-364da2661108http://jvndb.jvn.jp/jvndb/JVNDB-2014-000017 · af854a3a-2127-422b-91ae-364da2661108http://mail-archives.apache.org/mod_mbox/commons-dev/201402.mbox/%3C52F373FC.9030907%40apache.org%3E · af854a3a-2127-422b-91ae-364da2661108http://marc.info/?l=bugtraq&m=143136844732487&w=2 · af854a3a-2127-422b-91ae-364da2661108http://packetstormsecurity.com/files/127215/VMware-Security-Advisory-2014-0007.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2014-0252.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2014-0253.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2014-0400.html · af854a3a-2127-422b-91ae-364da2661108http://seclists.org/fulldisclosure/2014/Dec/23 · af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/57915 · af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/58075 · af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/58976 · af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/59039 · af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/59041 · af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/59183 · af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/59184 · af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/59185 · af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/59187 · af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/59232 · af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/59399 · af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/59492 · af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/59500 · af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/59725 · af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/60475 · af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/60753 · af854a3a-2127-422b-91ae-364da2661108http://svn.apache.org/r1565143 · af854a3a-2127-422b-91ae-364da2661108http://tomcat.apache.org/security-7.html · af854a3a-2127-422b-91ae-364da2661108http://tomcat.apache.org/security-8.html · af854a3a-2127-422b-91ae-364da2661108http://www-01.ibm.com/support/docview.wss?uid=swg21669554 · af854a3a-2127-422b-91ae-364da2661108http://www-01.ibm.com/support/docview.wss?uid=swg21675432 · af854a3a-2127-422b-91ae-364da2661108http://www-01.ibm.com/support/docview.wss?uid=swg21676091 · af854a3a-2127-422b-91ae-364da2661108http://www-01.ibm.com/support/docview.wss?uid=swg21676092 · af854a3a-2127-422b-91ae-364da2661108http://www-01.ibm.com/support/docview.wss?uid=swg21676401 · af854a3a-2127-422b-91ae-364da2661108http://www-01.ibm.com/support/docview.wss?uid=swg21676403 · af854a3a-2127-422b-91ae-364da2661108http://www-01.ibm.com/support/docview.wss?uid=swg21676405 · af854a3a-2127-422b-91ae-364da2661108http://www-01.ibm.com/support/docview.wss?uid=swg21676410 · af854a3a-2127-422b-91ae-364da2661108http://www-01.ibm.com/support/docview.wss?uid=swg21676656 · af854a3a-2127-422b-91ae-364da2661108http://www-01.ibm.com/support/docview.wss?uid=swg21676853 · af854a3a-2127-422b-91ae-364da2661108http://www-01.ibm.com/support/docview.wss?uid=swg21677691 · af854a3a-2127-422b-91ae-364da2661108http://www-01.ibm.com/support/docview.wss?uid=swg21677724 · af854a3a-2127-422b-91ae-364da2661108http://www-01.ibm.com/support/docview.wss?uid=swg21681214 · af854a3a-2127-422b-91ae-364da2661108http://www.debian.org/security/2014/dsa-2856 · af854a3a-2127-422b-91ae-364da2661108http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS14-015/index.html · af854a3a-2127-422b-91ae-364da2661108http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS14-016/index.html · af854a3a-2127-422b-91ae-364da2661108http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS14-017/index.html · af854a3a-2127-422b-91ae-364da2661108http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-350733.htm · af854a3a-2127-422b-91ae-364da2661108http://www.mandriva.com/security/advisories?name=MDVSA-2015:084 · af854a3a-2127-422b-91ae-364da2661108http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html · af854a3a-2127-422b-91ae-364da2661108http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html · af854a3a-2127-422b-91ae-364da2661108http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html · af854a3a-2127-422b-91ae-364da2661108http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html · af854a3a-2127-422b-91ae-364da2661108http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html · af854a3a-2127-422b-91ae-364da2661108http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html · af854a3a-2127-422b-91ae-364da2661108http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html · af854a3a-2127-422b-91ae-364da2661108http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html · af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/archive/1/532549/100/0/threaded · af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/archive/1/534161/100/0/threaded · af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/65400 · af854a3a-2127-422b-91ae-364da2661108http://www.ubuntu.com/usn/USN-2130-1 · af854a3a-2127-422b-91ae-364da2661108http://www.vmware.com/security/advisories/VMSA-2014-0007.html · af854a3a-2127-422b-91ae-364da2661108http://www.vmware.com/security/advisories/VMSA-2014-0008.html · af854a3a-2127-422b-91ae-364da2661108http://www.vmware.com/security/advisories/VMSA-2014-0012.html · af854a3a-2127-422b-91ae-364da2661108https://bugzilla.redhat.com/show_bug.cgi?id=1062337 · af854a3a-2127-422b-91ae-364da2661108https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05324755 · af854a3a-2127-422b-91ae-364da2661108https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05376917 · af854a3a-2127-422b-91ae-364da2661108https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 · af854a3a-2127-422b-91ae-364da2661108https://security.gentoo.org/glsa/202107-39 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 28 MAR 19:00Z
    MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a…
    cvelistv5