CVE-2014-0095

Severity

5.3

Description

java/org/apache/coyote/ajp/AbstractAjpProcessor.java in Apache Tomcat 8.x before 8.0.4 allows remote attackers to cause a denial of service (thread consumption) by using a "Content-Length: 0" AJP request to trigger a hang in request processing.

Mitigation

We recommend upgrading to a version of this component that is not vulnerable to this specific issue.

Apache Tomcat 8.0.x

First release:

2014-06-25

First release:

2018-06-30

CVEs:

Support Lifecycle:

Unsupported

Namespace:

javax

8.0.1 8.0.3

Feel Vulnerable?

Contact us so we can help you.

First name ^*
Last name ^*
Email ^*
Company ^*
Product ^*
Heard about us from: ^*
Tell us more ^*

Send me a confirmation email

^* These fields are required.

CVE-2014-0095

Severity

5.3

Description

Mitigation

Related links:

Project

Category

Tags

Date Disclosed

Date Discovered

Apache Tomcat 8.0.x

Feel Vulnerable?

Contact us so we can help you.

First name ^*
Last name ^*
Email ^*
Company ^*
Product ^*
Heard about us from: ^*
Tell us more ^*

Send me a confirmation email

^* These fields are required.

Tomitribe

Services

Open Source