Summary
[0:7.0.54-2]
- Resovles: CVE-2014-0227
Fixed packages 10
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | tomcat | 0:7.0.54-2.el7_1 |
| Oracle Linux · 7 | tomcat-admin-webapps | 0:7.0.54-2.el7_1 |
| Oracle Linux · 7 | tomcat-docs-webapp | 0:7.0.54-2.el7_1 |
| Oracle Linux · 7 | tomcat-el-2.2-api | 0:7.0.54-2.el7_1 |
| Oracle Linux · 7 | tomcat-javadoc | 0:7.0.54-2.el7_1 |
| Oracle Linux · 7 | tomcat-jsp-2.2-api | 0:7.0.54-2.el7_1 |
| Oracle Linux · 7 | tomcat-jsvc | 0:7.0.54-2.el7_1 |
| Oracle Linux · 7 | tomcat-lib | 0:7.0.54-2.el7_1 |
| Oracle Linux · 7 | tomcat-servlet-3.0-api | 0:7.0.54-2.el7_1 |
| Oracle Linux · 7 | tomcat-webapps | 0:7.0.54-2.el7_1 |
Vulnerabilities 1
-
Medium —CVE-2014-0227 EPSS 21%
Improper Input Validation in Apache Tomcat
java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat 6.x before 6.0.42, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle attempts to continue reading data after an error has occurred, which allows remote attackers to …