CVE-2014-0050: Input Validation
A flaw was found in Apache Commons FileUpload. Specially-crafted input could trigger a denial of service if the buffer used by the MultipartStream was not big enough.
Tomcat 7 includes an embedded copy of Apache Commons FileUpload, so it was possible to craft a malformed Content-Type header for a multipart request which would cause Tomcat to enter an infinite loop.
This has been corrected in Tomcat 7 via commit r1565169 [1]. It has been corrected in Apache Commons FileUpload via commit r1565143 [2].
No new releases have been made with the changes; Tomcat 7.0.51 (not yet released) will correct this flaw.
[1] http://svn.apache.org/viewvc?view=revision&revision=1565169 [2] http://svn.apache.org/viewvc?view=revision&revision=1565143
Other sources
MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted Content-Type header that bypasses a loop's intended exit conditions.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
maven/org.apache.tomcat:tomcatto a version that resolves this vulnerability.Fixed in 7.0.52 - Upgrade
Upgrade
maven/org.apache.tomcat:tomcatto a version that resolves this vulnerability.Fixed in 8.0.3 - Upgrade
Upgrade
maven/commons-fileupload:commons-fileuploadto a version that resolves this vulnerability.Fixed in 1.3.1 - Upgrade
Upgrade
redhat/tomcatto a version that resolves this vulnerability.Fixed in 7.0.52 - Upgrade
Upgrade
redhat/tomcatto a version that resolves this vulnerability.Fixed in 8.0.2 - Upgrade
Upgrade
redhat/apache-commons-fileuploadto a version that resolves this vulnerability.Fixed in 1.3.1 - Upgrade
Upgrade
Apache Commons FileUploadto a version that resolves this vulnerability.Patch commit r1565143 - Upgrade
Upgrade
Apache Tomcat 7to a version that resolves this vulnerability.Patch commit r1565169
Event History
Frequently Asked Questions
What is the severity of CVE-2014-0050?
CVE-2014-0050 has a severity rating that indicates it can lead to a denial of service when exploited.
How do I fix CVE-2014-0050?
To fix CVE-2014-0050, upgrade your Apache Tomcat or Apache Commons FileUpload to the advised versions: Tomcat 7.0.52 or 8.0.3, and Commons FileUpload 1.3.1.
Which versions are affected by CVE-2014-0050?
CVE-2014-0050 affects multiple versions of Apache Commons FileUpload and Apache Tomcat, up to 7.0.50 and 8.0.1 respectively.
Is CVE-2014-0050 specifically an Apache Tomcat vulnerability?
Yes, CVE-2014-0050 is a vulnerability that affects Apache Tomcat due to its embedded use of Apache Commons FileUpload.
Can CVE-2014-0050 affect other software apart from Tomcat?
Yes, CVE-2014-0050 can also affect applications using Apache Commons FileUpload if they do not handle multipart requests correctly.