CVE-2014-0230 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2014-0230 Interim 1 21 2023-02-20T02:00:29Z current 2021-05-30T13:17:46Z 2023-02-20T02:00:29Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2014-0230 Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of an entire request body, which allows remote attackers to cause a denial of service (thread consumption) via a series of aborted upload attempts. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2015-August/001523.html E-Mail link for SUSE-SU-2015:1337-1 https://lists.suse.com/pipermail/sle-security-updates/2015-September/001594.html E-Mail link for SUSE-SU-2015:1565-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Server 11 SP1-TERADATA SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-TERADATA SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 11 SP4 LTSS SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server for SAP Applications 11 SP3 SUSE Linux Enterprise Server for SAP Applications 11 SP4 tomcat tomcat-admin-webapps tomcat-docs-webapp tomcat-el-2_2-api tomcat-javadoc tomcat-jsp-2_2-api tomcat-lib tomcat-servlet-3_0-api tomcat-webapps tomcat6 tomcat6-6.0.41-0.45.1 tomcat6-6.0.41-0.47.1 tomcat6-admin-webapps-6.0.41-0.45.1 tomcat6-admin-webapps-6.0.41-0.47.1 tomcat6-docs-webapp-6.0.41-0.45.1 tomcat6-docs-webapp-6.0.41-0.47.1 tomcat6-javadoc-6.0.41-0.45.1 tomcat6-javadoc-6.0.41-0.47.1 tomcat6-jsp-2_1-api-6.0.41-0.45.1 tomcat6-jsp-2_1-api-6.0.41-0.47.1 tomcat6-lib-6.0.41-0.45.1 tomcat6-lib-6.0.41-0.47.1 tomcat6-servlet-2_5-api-6.0.41-0.45.1 tomcat6-servlet-2_5-api-6.0.41-0.47.1 tomcat6-webapps-6.0.41-0.45.1 tomcat6-webapps-6.0.41-0.47.1 tomcat6-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA tomcat6-admin-webapps-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA tomcat6-docs-webapp-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA tomcat6-javadoc-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA tomcat6-jsp-2_1-api-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA tomcat6-lib-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA tomcat6-servlet-2_5-api-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA tomcat6-webapps-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA tomcat6-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP3 tomcat6-admin-webapps-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP3 tomcat6-docs-webapp-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP3 tomcat6-javadoc-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP3 tomcat6-jsp-2_1-api-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP3 tomcat6-lib-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP3 tomcat6-servlet-2_5-api-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP3 tomcat6-webapps-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP3 tomcat6-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA tomcat6-admin-webapps-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA tomcat6-docs-webapp-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA tomcat6-javadoc-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA tomcat6-jsp-2_1-api-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA tomcat6-lib-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA tomcat6-servlet-2_5-api-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA tomcat6-webapps-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA tomcat6-6.0.41-0.47.1 as a component of SUSE Linux Enterprise Server 11 SP4 tomcat6-admin-webapps-6.0.41-0.47.1 as a component of SUSE Linux Enterprise Server 11 SP4 tomcat6-docs-webapp-6.0.41-0.47.1 as a component of SUSE Linux Enterprise Server 11 SP4 tomcat6-javadoc-6.0.41-0.47.1 as a component of SUSE Linux Enterprise Server 11 SP4 tomcat6-jsp-2_1-api-6.0.41-0.47.1 as a component of SUSE Linux Enterprise Server 11 SP4 tomcat6-lib-6.0.41-0.47.1 as a component of SUSE Linux Enterprise Server 11 SP4 tomcat6-servlet-2_5-api-6.0.41-0.47.1 as a component of SUSE Linux Enterprise Server 11 SP4 tomcat6-webapps-6.0.41-0.47.1 as a component of SUSE Linux Enterprise Server 11 SP4 tomcat6-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 tomcat6-admin-webapps-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 tomcat6-docs-webapp-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 tomcat6-javadoc-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 tomcat6-jsp-2_1-api-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 tomcat6-lib-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 tomcat6-servlet-2_5-api-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 tomcat6-webapps-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 tomcat6-6.0.41-0.47.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 tomcat6-admin-webapps-6.0.41-0.47.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 tomcat6-docs-webapp-6.0.41-0.47.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 tomcat6-javadoc-6.0.41-0.47.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 tomcat6-jsp-2_1-api-6.0.41-0.47.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 tomcat6-lib-6.0.41-0.47.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 tomcat6-servlet-2_5-api-6.0.41-0.47.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 tomcat6-webapps-6.0.41-0.47.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 tomcat6 as a component of SUSE Linux Enterprise Server 11 SP4 LTSS tomcat as a component of SUSE Linux Enterprise Server 12 tomcat-admin-webapps as a component of SUSE Linux Enterprise Server 12 tomcat-docs-webapp as a component of SUSE Linux Enterprise Server 12 tomcat-el-2_2-api as a component of SUSE Linux Enterprise Server 12 tomcat-javadoc as a component of SUSE Linux Enterprise Server 12 tomcat-jsp-2_2-api as a component of SUSE Linux Enterprise Server 12 tomcat-lib as a component of SUSE Linux Enterprise Server 12 tomcat-servlet-3_0-api as a component of SUSE Linux Enterprise Server 12 tomcat-webapps as a component of SUSE Linux Enterprise Server 12 Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of an entire request body, which allows remote attackers to cause a denial of service (thread consumption) via a series of aborted upload attempts. CVE-2014-0230 SUSE Linux Enterprise Server 11 SP1-TERADATA:tomcat6-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:tomcat6-admin-webapps-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:tomcat6-docs-webapp-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:tomcat6-javadoc-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:tomcat6-jsp-2_1-api-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:tomcat6-lib-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:tomcat6-servlet-2_5-api-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:tomcat6-webapps-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP3:tomcat6-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP3:tomcat6-admin-webapps-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP3:tomcat6-docs-webapp-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP3:tomcat6-javadoc-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP3:tomcat6-jsp-2_1-api-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP3:tomcat6-lib-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP3:tomcat6-servlet-2_5-api-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP3:tomcat6-webapps-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-admin-webapps-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-docs-webapp-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-javadoc-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-jsp-2_1-api-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-lib-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-servlet-2_5-api-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-webapps-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP4:tomcat6-6.0.41-0.47.1 SUSE Linux Enterprise Server 11 SP4:tomcat6-admin-webapps-6.0.41-0.47.1 SUSE Linux Enterprise Server 11 SP4:tomcat6-docs-webapp-6.0.41-0.47.1 SUSE Linux Enterprise Server 11 SP4:tomcat6-javadoc-6.0.41-0.47.1 SUSE Linux Enterprise Server 11 SP4:tomcat6-jsp-2_1-api-6.0.41-0.47.1 SUSE Linux Enterprise Server 11 SP4:tomcat6-lib-6.0.41-0.47.1 SUSE Linux Enterprise Server 11 SP4:tomcat6-servlet-2_5-api-6.0.41-0.47.1 SUSE Linux Enterprise Server 11 SP4:tomcat6-webapps-6.0.41-0.47.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-6.0.41-0.45.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-admin-webapps-6.0.41-0.45.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-docs-webapp-6.0.41-0.45.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-javadoc-6.0.41-0.45.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-jsp-2_1-api-6.0.41-0.45.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-lib-6.0.41-0.45.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-servlet-2_5-api-6.0.41-0.45.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-webapps-6.0.41-0.45.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-6.0.41-0.47.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-admin-webapps-6.0.41-0.47.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-docs-webapp-6.0.41-0.47.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-javadoc-6.0.41-0.47.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-jsp-2_1-api-6.0.41-0.47.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-lib-6.0.41-0.47.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-servlet-2_5-api-6.0.41-0.47.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-webapps-6.0.41-0.47.1 SUSE Linux Enterprise Server 12:tomcat SUSE Linux Enterprise Server 12:tomcat-admin-webapps SUSE Linux Enterprise Server 12:tomcat-docs-webapp SUSE Linux Enterprise Server 12:tomcat-el-2_2-api SUSE Linux Enterprise Server 12:tomcat-javadoc SUSE Linux Enterprise Server 12:tomcat-jsp-2_2-api SUSE Linux Enterprise Server 12:tomcat-lib SUSE Linux Enterprise Server 12:tomcat-servlet-3_0-api SUSE Linux Enterprise Server 12:tomcat-webapps SUSE Linux Enterprise Server 11 SP4 LTSS:tomcat6 important 7.8 AV:N/AC:L/Au:N/C:N/I:N/A:C