VulnerableCode Package Details - pkg:maven/org.apache.tomcat/tomcat-coyote@8.0.3

Search for packages

Vulnerability	Summary	Fixed by
VCID-2sr7-c3j5-cfhg Aliases: CVE-2014-0095 GHSA-wf5v-jhxj-q632	java/org/apache/coyote/ajp/AbstractAjpProcessor.java in Apache Tomcat 8.x before 8.0.4 allows remote attackers to cause a denial of service (thread consumption) by using a "Content-Length: 0" AJP request to trigger a hang in request processing.	8.0.4 Affected by 0 other vulnerabilities. 8.0.5 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-3r3s-q21j-c3au Aliases: CVE-2016-6816 GHSA-jc7p-5r39-9477	The code in Apache Tomcat 9.0.0.M1 to 9.0.0.M11, 8.5.0 to 8.5.6, 8.0.0.RC1 to 8.0.38, 7.0.0 to 7.0.72, and 6.0.0 to 6.0.47 that parsed the HTTP request line permitted invalid characters. This could be exploited, in conjunction with a proxy that also permitted the invalid characters but with a different interpretation, to inject data into the HTTP response. By manipulating the HTTP response the attacker could poison a web-cache, perform an XSS attack and/or obtain sensitive information from requests other then their own.	8.0.39 Affected by 0 other vulnerabilities. 8.5.8 Affected by 13 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 9.0.0.M12 Affected by 0 other vulnerabilities. 9.0.0.M13 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-kzzv-rhya-j7dd Aliases: CVE-2014-0075 GHSA-475f-74wp-pqv5	Integer overflow in the parseChunkHeader function in java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 allows remote attackers to cause a denial of service (resource consumption) via a malformed chunk size in chunked transfer coding of a request during the streaming of data.	8.0.4 Affected by 0 other vulnerabilities. 8.0.5 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}

Vulnerability

Summary

Fixed by

VCID-2sr7-c3j5-cfhg
Aliases:
CVE-2014-0095
GHSA-wf5v-jhxj-q632

java/org/apache/coyote/ajp/AbstractAjpProcessor.java in Apache Tomcat 8.x before 8.0.4 allows remote attackers to cause a denial of service (thread consumption) by using a "Content-Length: 0" AJP request to trigger a hang in request processing.

8.0.4
Affected by 0 other vulnerabilities.

8.0.5
Affected by 1 other vulnerability.

VCID-3r3s-q21j-c3au
Aliases:
CVE-2016-6816
GHSA-jc7p-5r39-9477

The code in Apache Tomcat 9.0.0.M1 to 9.0.0.M11, 8.5.0 to 8.5.6, 8.0.0.RC1 to 8.0.38, 7.0.0 to 7.0.72, and 6.0.0 to 6.0.47 that parsed the HTTP request line permitted invalid characters. This could be exploited, in conjunction with a proxy that also permitted the invalid characters but with a different interpretation, to inject data into the HTTP response. By manipulating the HTTP response the attacker could poison a web-cache, perform an XSS attack and/or obtain sensitive information from requests other then their own.

8.0.39
Affected by 0 other vulnerabilities.

8.5.8
Affected by 13 other vulnerabilities.

9.0.0.M12
Affected by 0 other vulnerabilities.

9.0.0.M13
Affected by 1 other vulnerability.

VCID-kzzv-rhya-j7dd
Aliases:
CVE-2014-0075
GHSA-475f-74wp-pqv5

Integer overflow in the parseChunkHeader function in java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 allows remote attackers to cause a denial of service (resource consumption) via a malformed chunk size in chunked transfer coding of a request during the streaming of data.

8.0.4
Affected by 0 other vulnerabilities.

8.0.5
Affected by 1 other vulnerability.

Vulnerability	Summary	Aliases
VCID-gv12-4ruf-kfhq	MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted Content-Type header that bypasses a loop's intended exit conditions.	CVE-2014-0050 GHSA-xx68-jfcg-xmmf

Vulnerability

Summary

Aliases

VCID-gv12-4ruf-kfhq

MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted Content-Type header that bypasses a loop's intended exit conditions.

CVE-2014-0050
GHSA-xx68-jfcg-xmmf

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-04-16T21:54:48.224894+00:00	GitLab Importer	Affected by	VCID-2sr7-c3j5-cfhg	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2014-0095.yml	38.4.0
2026-04-16T21:52:06.486396+00:00	GitLab Importer	Affected by	VCID-kzzv-rhya-j7dd	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2014-0075.yml	38.4.0
2026-04-16T21:47:27.500183+00:00	GitLab Importer	Affected by	VCID-3r3s-q21j-c3au	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2016-6816.yml	38.4.0
2026-04-16T20:31:21.715021+00:00	GitLab Importer	Fixing	VCID-gv12-4ruf-kfhq	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2014-0050.yml	38.4.0
2026-04-11T23:10:05.810074+00:00	GitLab Importer	Affected by	VCID-2sr7-c3j5-cfhg	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2014-0095.yml	38.3.0
2026-04-11T23:07:55.461442+00:00	GitLab Importer	Affected by	VCID-kzzv-rhya-j7dd	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2014-0075.yml	38.3.0
2026-04-11T23:03:17.740718+00:00	GitLab Importer	Affected by	VCID-3r3s-q21j-c3au	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2016-6816.yml	38.3.0
2026-04-11T21:41:42.764667+00:00	GitLab Importer	Fixing	VCID-gv12-4ruf-kfhq	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2014-0050.yml	38.3.0
2026-04-02T23:18:49.446100+00:00	GitLab Importer	Affected by	VCID-2sr7-c3j5-cfhg	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2014-0095.yml	38.1.0
2026-04-02T23:16:21.408175+00:00	GitLab Importer	Affected by	VCID-kzzv-rhya-j7dd	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2014-0075.yml	38.1.0
2026-04-02T23:11:40.522939+00:00	GitLab Importer	Affected by	VCID-3r3s-q21j-c3au	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2016-6816.yml	38.1.0
2026-04-02T21:55:54.927933+00:00	GitLab Importer	Fixing	VCID-gv12-4ruf-kfhq	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2014-0050.yml	38.1.0
2026-04-01T17:39:11.506931+00:00	GitLab Importer	Affected by	VCID-2sr7-c3j5-cfhg	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2014-0095.yml	38.0.0
2026-04-01T17:36:26.885687+00:00	GitLab Importer	Affected by	VCID-kzzv-rhya-j7dd	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2014-0075.yml	38.0.0
2026-04-01T17:31:33.652628+00:00	GitLab Importer	Affected by	VCID-3r3s-q21j-c3au	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2016-6816.yml	38.0.0
2026-04-01T12:46:52.283252+00:00	GitLab Importer	Fixing	VCID-gv12-4ruf-kfhq	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2014-0050.yml	38.0.0