{"id":"CVE-2014-0095","published":"2014-05-31T10:00:00Z","modified":"2024-08-06T09:05:38Z","title":"java/org/apache/coyote/ajp/AbstractAjpProcessor.java in Apache Tomcat 8.x before 8.0.4 allows remote attackers to…","vendor":null,"product":null,"tier":"tail","description":{"text":"java/org/apache/coyote/ajp/AbstractAjpProcessor.java in Apache Tomcat 8.x before 8.0.4 allows remote attackers to cause a denial of service (thread consumption) by using a \"Content-Length: 0\" AJP request to trigger a hang in request processing.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.08494,"percentile":0.94997,"provenance":"source"},"cwes":[],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21681528","tags":["x_refsource_CONFIRM"]},{"url":"http://seclists.org/fulldisclosure/2014/May/134","tags":["mailing-list","x_refsource_FULLDISC"]},{"url":"http://tomcat.apache.org/security-8.html","tags":["x_refsource_CONFIRM"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21678231","tags":["x_refsource_CONFIRM"]},{"url":"http://secunia.com/advisories/59873","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www.securityfocus.com/bid/67673","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html","tags":["x_refsource_CONFIRM"]},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1578392","tags":["x_refsource_CONFIRM"]},{"url":"http://www.securitytracker.com/id/1030300","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"http://secunia.com/advisories/60729","tags":["third-party-advisory","x_refsource_SECUNIA"]}],"priority":{"score":19.0,"factors":[{"name":"EPSS percentile","points":19.0}]},"affected":[{"ecosystem":"Maven","package":"org.apache.tomcat:tomcat-coyote","vulnerableRanges":[">=8.0.0-RC1, <8.0.4"],"patched":["8.0.4"],"from":["GHSA-wf5v-jhxj-q632"],"provenance":"source"},{"ecosystem":"Maven","package":"org.apache.tomcat.embed:tomcat-embed-core","vulnerableRanges":[">=8.0.0-RC1, <8.0.4"],"patched":["8.0.4"],"from":["GHSA-wf5v-jhxj-q632"],"provenance":"source"}],"euvd":{"id":"EUVD-2022-5560","exploited":false,"provenance":"source"}}