p PatchFirst

CVE-2014-0099

CVE-2014-0099

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

Integer overflow in java/org/apache/tomcat/util/buf/Ascii.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4, when operated behind a reverse proxy, allows remote attackers to conduct HTTP request smuggling attacks via a crafted Content-Length HTTP header.

EPSS 8.8% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • tomcat6 Ubuntu:14.04:LTS

    Versions
    • 6.0.37-1
    • 6.0.39-1
    Affected ranges
    • ECOSYSTEM: < 6.0.39-1ubuntu0.1

    Update to 6.0.39-1ubuntu0.1

  • tomcat7 Ubuntu:14.04:LTS

    Versions
    • 7.0.42-1
    • 7.0.47-1
    • 7.0.50-1
    • 7.0.52-1
    Affected ranges
    • ECOSYSTEM: < 7.0.52-1ubuntu0.1

    Update to 7.0.52-1ubuntu0.1

Original sources

Check your server →