ZeroDay Findings
Sign inSign up

Findings

CVE-2014-0230

Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of a…

Published Jun 7, 2015 · updated Oct 14, 2026 · apache tomcat

Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of an entire request body, which allows remote attackers to cause a denial of service (thread consumption) via a series of aborted upload attempts.

Timeline

Detection, updates, and resolution for this record.

  1. Jun 7, 2015 · NIST NVD

    Detected

    Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of an entire request body, which allows remote attackers to cause a denial of service (thread consumption) via a series of aborted upload attempts.

  2. Oct 14, 2026 · NIST NVD

    Updated

    Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of an entire request body, which allows remote attackers to cause a denial of service (thread consumption) via a series of aborted upload attempts.

Affected

  • cpe apache/tomcat6.0.0
  • cpe apache/tomcat6.0.1
  • cpe apache/tomcat6.0.2
  • cpe apache/tomcat6.0.3
  • cpe oracle/virtualization4.63

Sources

  • CVE.orgCVE-2014-0230

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2014-0230

    30-day exploitation probability 20.2%

    first.org
  • NIST NVDCVE-2014-0230

    Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of an entire request body, which allows remote attackers to cause a denial of service (thread consumption) via a seri

    nvd.nist.gov

References