Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2014-0099
4.3
MEDIUMCVSS v2
Published
May 31, 2014
Affected
1 project
Assigned by
Red Hat
Severity scale
010
Description
Integer overflow in java/org/apache/tomcat/util/buf/Ascii.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4, when operated behind a reverse proxy, allows remote attackers to conduct HTTP request smuggling attacks via a crafted Content-Length HTTP header.
apache/tomcat
GitHubApache Tomcat
GitHubApache Tomcat= 6.0.33, = 6.0.0, = 6.0.6, = 6.0.4, = 6.0.11, <= 6.0.39, = 6, = 6.0.7, = 6.0.1, = 6.0.10, = 6.0.17, = 6.0.28, = 6.0.29, = 6.0.3, = 6.0.37, = 6.0.15, = 6.0.24, = 6.0.32, = 6.0, = 6.0.14, = 6.0.20, = 6.0.31, = 6.0.9, = 6.0.18, = 6.0.19, = 6.0.27, = 6.0.35, = 6.0.36, = 6.0.12, = 6.0.2, = 6.0.8, = 6.0.16, = 6.0.26, = 6.0.13, = 6.0.30, = 6.0.5, = 8.0.1, = 8.0.0, = 8.0.3, = 7.0.2, = 7.0.49, = 7.0.12, = 7.0.20, = 7.0.34, = 7.0.8, = 7.0.1, = 7.0.5, = 7.0.11, = 7.0.26, = 7.0.4, = 7.0.52, = 7.0.0, = 7.0.22, = 7.0.44, = 7.0.50, = 7.0.6, = 7.0.48, = 7.0.18, = 7.0.23, = 7.0.39, = 7.0.46, = 7.0.7, = 7.0.14, = 7.0.28, = 7.0.10, = 7.0.19, = 7.0.25, = 7.0.32, = 7.0.33, = 7.0.15, = 7.0.16, = 7.0.21, = 7.0.29, = 7.0.3, = 7.0.37, = 7.0.38, = 7.0.43, = 7.0.40, = 7.0.47, = 7.0.9, = 7.0.17, = 7.0.24, = 7.0.30, = 7.0.31, = 7.0.45, = 7.0.13, = 7.0.27, = 7.0.35, = 7.0.36, = 7.0.41, = 7.0.42NVD