ALT Linux Team

Package apache-commons-fileupload update in sisyphus on 2024-05-27

ALT-PU-2016-3249-1

Package apache-commons-fileupload updated to version 1.3.1-alt1_7jpp8 for branch sisyphus in task 157730.

Closed vulnerabilities

Published: 2014-04-01

BDU:2022-03337

Уязвимость файла MultipartStream.java библиотеки Apache Commons FileUpload, позволяющая нарушителю вызвать отказ в обслуживании

Severity: MEDIUM (6.3) Vector: AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
References:
Published: 2014-04-01
Modified: 2024-11-21

CVE-2014-0050

MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted Content-Type header that bypasses a loop's intended exit conditions.

Severity: HIGH (7.5)
References:
VKontakte | Telegram | YouTube | Forum | GitHub | Bugzilla
Version: 2.1.0
Back to top