Описание
MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted Content-Type header that bypasses a loop's intended exit conditions.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | not-affected | 1.3.1-1 |
| bionic | not-affected | 1.3.1-1 |
| cosmic | not-affected | 1.3.1-1 |
| devel | not-affected | 1.3.1-1 |
| disco | not-affected | 1.3.1-1 |
| esm-apps-legacy/xenial | not-affected | 1.3.1-1 |
| esm-apps/bionic | not-affected | 1.3.1-1 |
| esm-apps/xenial | not-affected | 1.3.1-1 |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was needed] |
| lucid | ignored | end of life |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| artful | DNE | |
| bionic | DNE | |
| cosmic | DNE | |
| devel | DNE | |
| disco | DNE | |
| esm-apps-legacy/xenial | not-affected | |
| esm-apps/xenial | not-affected | |
| esm-infra-legacy/trusty | not-affected | |
| lucid | not-affected | |
| precise | not-affected |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| artful | not-affected | 7.0.52-1 |
| bionic | not-affected | 7.0.52-1 |
| cosmic | not-affected | 7.0.52-1 |
| devel | DNE | |
| disco | DNE | |
| esm-apps-legacy/xenial | not-affected | 7.0.52-1 |
| esm-apps/bionic | not-affected | 7.0.52-1 |
| esm-apps/xenial | not-affected | 7.0.52-1 |
| esm-infra-legacy/trusty | not-affected | 7.0.52-1 |
| lucid | DNE |
Показывать по
7.5 High
CVSS2
7.5 High
CVSS3
Связанные уязвимости
MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted Content-Type header that bypasses a loop's intended exit conditions.
MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted Content-Type header that bypasses a loop's intended exit conditions.
MultipartStream.java in Apache Commons FileUpload before 1.3.1, as use ...
Уязвимость файла MultipartStream.java библиотеки Apache Commons FileUpload, позволяющая нарушителю вызвать отказ в обслуживании
7.5 High
CVSS2
7.5 High
CVSS3