Lucene search
Gentoo FoundationMGASA-2014-0109HistoryFeb 28, 2014 - 10:57 p.m.
Updated apache-commons-fileupload package fixes CVE-2014-0050
2014-02-2822:57:52
Gentoo Foundation
advisories.mageia.org
19
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.191 Low
EPSS
Percentile
96.3%
Updated apache-commons-fileupload packages fix security vulnerability: It was discovered that the Apache Commons FileUpload package for Java could enter an infinite loop while processing a multipart request with a crafted Content-Type, resulting in a denial-of-service condition (CVE-2014-0050).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 3 | noarch | apache-commons-fileupload | < 1.2.2-10.1 | apache-commons-fileupload-1.2.2-10.1.mga3 |
| Mageia | 4 | noarch | apache-commons-fileupload | < 1.3-5.1 | apache-commons-fileupload-1.3-5.1.mga4 |
Related
nessus
nessus
Fedora 20 : apache-commons-fileupload-1.3-5.fc20 (2014-2175)
2014-02-18 00:00:00
atlassian
atlassian
Security vulnerability in apache commons fileupload
2014-02-10 05:56:15
Security vulnerability in apache commons fileupload
2014-02-10 05:56:15
Security vulnerability in apache commons fileupload
2014-02-10 05:56:15
seebug
seebug
Apache Commons FileUpload/Apache Tomcat拒绝服务漏洞
2014-02-13 00:00:00
Apache Commons FileUpload and Apache Tomcat - Denial-of-Service
2014-07-01 00:00:00
debian
debian
[SECURITY] [DSA 2856-1] libcommons-fileupload-java security update
2014-02-07 22:59:08
[SECURITY] [DSA 2897-1] tomcat7 security update
2014-04-08 18:25:14
debiancve
debiancve
CVE-2014-0050
2014-04-01 06:27:51
ibm
ibm
Security Bulletin: DataQuant for WebSphere is affected by a vulnerability in Apache Commons FileUpload (CVE-2014-0050)
2021-02-12 21:24:38
Security Bulletin: Denial of Service attack possible on Cúram instances using Apache Commons FileUpload (CVE-2014-0050)
2018-07-02 12:08:36
Security Bulletin: IBM Support Assistant (CVE-2014-0050)
2018-06-15 06:59:44
securityvulns
securityvulns
[SECURITY] CVE-2014-0050 Apache Commons FileUpload and Apache Tomcat DoS
2014-03-31 00:00:00
HP SDN VAN Controller DoS
2015-05-11 00:00:00
veracode
veracode
Denial Of Service (DoS) By An Infinite Loop Causing CPU Consumption
2019-01-15 08:58:15
openvas
openvas
Mageia: Security Advisory (MGASA-2014-0109)
2022-01-28 00:00:00
Fedora Update for apache-commons-fileupload FEDORA-2014-2183
2014-02-20 00:00:00
SUSE: Security Advisory (SUSE-SU-2014:0548-1)
2021-06-09 00:00:00
f5
f5
SOL15189 - Apache Commons FileUpload vulnerability CVE-2014-0050
2014-04-18 00:00:00
K15189 : Apache Commons FileUpload vulnerability CVE-2014-0050
2015-08-15 00:00:00
exploitpack
exploitpack
Apache Commons FileUpload and Apache Tomcat - Denial of Service
2014-02-12 00:00:00
redhat
redhat
jvn
jvn
prion
prion
Design/Logic Flaw
2014-04-01 06:27:00
nvd
nvd
CVE-2014-0050
2014-04-01 06:27:51
mageia
mageia
Updated tomcat packages fix CVE-2014-0050
2014-02-28 22:59:29
tomcat
tomcat
Fixed in Apache Tomcat 7.0.52
2014-02-17 00:00:00
Fixed in Apache Tomcat 8.0.3
2014-02-11 00:00:00
suse
suse
Security update for jakarta-commons-fileupload (important)
2014-04-17 21:04:15
amazon
amazon
Medium: tomcat7
2014-03-24 23:36:00
Medium: tomcat6
2014-05-21 10:45:00
osv
osv
Commons FileUpload Denial of service vulnerability
2018-12-21 17:51:42
tomcat7 - security update
2014-04-08 00:00:00
cvelist
cvelist
CVE-2014-0050
2014-03-28 19:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: apache-commons-fileupload-1.3-5.fc20
2014-02-17 21:06:10
[SECURITY] Fedora 19 Update: apache-commons-fileupload-1.3-5.fc19
2014-02-17 21:07:04
ubuntucve
ubuntucve
CVE-2014-0050
2014-02-07 00:00:00
checkpoint_advisories
checkpoint_advisories
Apache Tomcat FileUpload Content-Type Header Infinite Loop (CVE-2014-0050)
2014-03-16 00:00:00
github
github
Commons FileUpload Denial of service vulnerability
2018-12-21 17:51:42
cve
cve
CVE-2014-0050
2014-04-01 06:27:51
zdt
zdt
Apache Commons FileUpload and Apache Tomcat Denial of Service
2014-02-12 00:00:00
exploitdb
exploitdb
Apache Commons FileUpload and Apache Tomcat - Denial of Service
2014-02-12 00:00:00
vmware
vmware
VMware vSphere product updates to third party libraries
2014-09-09 00:00:00
gentoo
gentoo
Apache Commons FileUpload: Multiple vulnerabilities
2021-07-17 00:00:00
Apache Tomcat: Multiple vulnerabilities
2014-12-15 00:00:00
huawei
huawei
Security Advisory-Apache Struts2 vulnerability on Huawei multiple products
2014-07-07 00:00:00
oraclelinux
oraclelinux
tomcat6 security update
2014-04-23 00:00:00
tomcat security update
2014-07-20 00:00:00
tomcat6 security and bug fix update
2014-07-09 00:00:00
threatpost
threatpost
VMware Patches Apache Struts Flaws in vCOPS
2014-06-25 13:59:49
ubuntu
ubuntu
Tomcat vulnerabilities
2014-03-06 00:00:00
centos
centos
tomcat6 security update
2014-04-23 19:07:14
tomcat6 security update
2014-07-09 16:09:49
symantec
symantec
SA100 : Apache Tomcat Vulnerabilities
2015-07-23 08:00:00
oracle
oracle
Oracle Critical Patch Update - April 2015
2015-04-14 00:00:00
Oracle Critical Patch Update - July 2014
2014-07-15 00:00:00
Oracle Critical Patch Update - October 2014
2014-10-14 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.191 Low
EPSS
Percentile
96.3%
Related for MGASA-2014-0109