Skip to content
OpenAdvisories
Medium Public exploit CVE-2014-0075 EUVD-2022-2320GHSA-475f-74wp-pqv5

Integer Overflow or Wraparound in Apache Tomcat

Published May 31, 2014 · Updated Oct 14, 2026 · Assigned by redhat

Package: org.apache.tomcat:tomcat Package: org.apache.tomcat:tomcat-coyote Package: tomcat6 Package: tomcat7 Ecosystem: Maven Ecosystem: Ubuntu

Description

Integer overflow in the parseChunkHeader function in java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 allows remote attackers to cause a denial of service (resource consumption) via a malformed chunk size in chunked transfer coding of a request during the streaming of data.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 7 tomcat6 6.0.45+dfsg-1~deb7u1 DSA-3530-1

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 14.04 LTS tomcat6 6.0.39-1ubuntu0.1 —
Ubuntu 14.04 LTS tomcat7 7.0.52-1ubuntu0.1 USN-2302-1

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 7 tomcat +9 7.0.42-6.el7_0 RHSA-2014:0827
RHEL 6 tomcat6 +8 6.0.24-72.el6_5 RHSA-2014:0865
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat JBoss Web Server 2 tomcat6 +9 6.0.37-20_patch_04.ep6.el5 RHSA-2014:0834
Red Hat JBoss Web Server 2 tomcat7 +9 7.0.40-11_patch_03.ep6.el6 RHSA-2014:0835
Red Hat JBoss EAP 6 jbossweb 7.3.2-4.Final_redhat_3.1.ep6.el5 RHSA-2014:0843

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 7 tomcat +9 7.0.42-6.el7_0 ELSA-2014-0827

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

  • LiviuPtr/CVE-2014-0075_PoC ★ 0 · Jan 18, 2026

    This is a simple PoC written in python that demonstrates the DoS through integer overflow.

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.apache.tomcat:tomcat < 6.0.40 6.0.40 GHSA-475f-74wp-pqv5
Maven org.apache.tomcat:tomcat >= 7.0.0, < 7.0.53 7.0.53 GHSA-475f-74wp-pqv5
Maven org.apache.tomcat:tomcat >= 8.0.0, < 8.0.4 8.0.4 GHSA-475f-74wp-pqv5
Maven org.apache.tomcat:tomcat-coyote < 6.0.40 6.0.40 GHSA-475f-74wp-pqv5
Maven org.apache.tomcat:tomcat-coyote >= 7.0.0, < 7.0.53 7.0.53 GHSA-475f-74wp-pqv5
Maven org.apache.tomcat:tomcat-coyote >= 8.0.0, < 8.0.4 8.0.4 GHSA-475f-74wp-pqv5

Advisories 8

References