CVE-2014-0050

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 83.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2014-04-01 · updated 2026-10-07
Weakness: CWE-264

Description

MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted Content-Type header that bypasses a loop's intended exit conditions.

Affected products

Apache Software Foundation Apache Commons FileUpload: through 1.3; 1.0, 1.1, 1.1.1, 1.2, 1.2.1, 1.2.2
Apache Tomcat: 7.0.0, 7.0.0-beta, 7.0.1, 7.0.2, 7.0.2-beta, 7.0.3 (+53)
Oracle Retail Applications: 12.0, 12.0in, 13.0, 13.1, 13.2, 13.3 (+2)

References

http://advisories.mageia.org/MGASA-2014-0110.html
http://blog.spiderlabs.com/2014/02/cve-2014-0050-exploit-with-boundaries-loops-without-boundaries.html
http://jvn.jp/en/jp/JVN14876762/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2014-000017
http://mail-archives.apache.org/mod_mbox/commons-dev/201402.mbox/%3C52F373FC.9030907%40apache.org%3E
http://marc.info/?l=bugtraq&m=143136844732487&w=2
http://packetstormsecurity.com/files/127215/VMware-Security-Advisory-2014-0007.html
http://rhn.redhat.com/errata/RHSA-2014-0252.html
http://rhn.redhat.com/errata/RHSA-2014-0253.html
http://rhn.redhat.com/errata/RHSA-2014-0400.html
http://seclists.org/fulldisclosure/2014/Dec/23
http://secunia.com/advisories/57915

Get alerted when CVE-2014-0050 or the next vulnerability affects your stack