CVE catalog

CVE-2014-0227

UBUNTU-CVE-2014-0227

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
21.04% · Oct 27, 2026

java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat 6.x before 6.0.42, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle attempts to continue reading data after an error has occurred, which allows remote attackers to conduct HTTP request smuggling attacks or cause a denial of service (resource consumption) by streaming data with malformed chunked transfer coding.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Ubuntutomcat614.046.0.37-1vulnerable
Ubuntutomcat614.046.0.39-1vulnerable
Ubuntutomcat614.046.0.39-1ubuntu0.1fixed
Ubuntutomcat714.047.0.42-1vulnerable
Ubuntutomcat714.047.0.47-1vulnerable
Ubuntutomcat714.047.0.50-1vulnerable
Ubuntutomcat714.047.0.52-1vulnerable
Ubuntutomcat714.047.0.52-1ubuntu0.1vulnerable
Ubuntutomcat714.047.0.52-1ubuntu0.3fixed
Ubuntutomcat616.046.0.41-4vulnerable
Ubuntutomcat616.046.0.45+dfsg-1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Ubuntutomcat6deb14.046.0.39-1ubuntu0.1Not reportedUBUNTU-CVE-2014-0227Not reported
Ubuntutomcat7deb14.047.0.52-1ubuntu0.3Not reportedUBUNTU-CVE-2014-0227Not reported
Ubuntutomcat6deb16.046.0.45+dfsg-1Not reportedUBUNTU-CVE-2014-0227Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]