Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-3txt-1psa-5kf5
Summary
Denial of service
`MultipartStream.java` in this package allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted `Content-Type` header that bypasses a loop's intended exit conditions.
Aliases
0
alias CVE-2014-0050
1
alias GHSA-xx68-jfcg-xmmf
Fixed_packages
0
url pkg:maven/commons-fileupload/commons-fileupload@1.3.1
purl pkg:maven/commons-fileupload/commons-fileupload@1.3.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/commons-fileupload/commons-fileupload@1.3.1
1
url pkg:maven/org.apache.tomcat/tomcat@7.0.52
purl pkg:maven/org.apache.tomcat/tomcat@7.0.52
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-u95s-xhwk-vka6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@7.0.52
2
url pkg:maven/org.apache.tomcat/tomcat@8.0.3
purl pkg:maven/org.apache.tomcat/tomcat@8.0.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@8.0.3
3
url pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.52
purl pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.52
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.52
4
url pkg:maven/org.apache.tomcat/tomcat-coyote@8.0.3
purl pkg:maven/org.apache.tomcat/tomcat-coyote@8.0.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-coyote@8.0.3
Affected_packages
0
url pkg:maven/commons-fileupload/commons-fileupload@1.3
purl pkg:maven/commons-fileupload/commons-fileupload@1.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3txt-1psa-5kf5
1
vulnerability VCID-f2vg-xm25-ekd1
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/commons-fileupload/commons-fileupload@1.3
1
url pkg:maven/org.apache.tomcat/tomcat@7.0.0
purl pkg:maven/org.apache.tomcat/tomcat@7.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1b-3pdg-jbfq
1
vulnerability VCID-2kjh-4r2g-rqe6
2
vulnerability VCID-3txt-1psa-5kf5
3
vulnerability VCID-46sr-9kr3-1ubw
4
vulnerability VCID-4qcn-52ug-mbd5
5
vulnerability VCID-4t2h-jjhm-y7fq
6
vulnerability VCID-59dd-qzpt-aucm
7
vulnerability VCID-5m85-3zyu-7qak
8
vulnerability VCID-5udv-rheh-kqfy
9
vulnerability VCID-6umz-z8db-kqcy
10
vulnerability VCID-6uuq-2a39-yubx
11
vulnerability VCID-74c7-a56p-kufz
12
vulnerability VCID-89e9-m968-vfhe
13
vulnerability VCID-937w-2w2q-7fdy
14
vulnerability VCID-9hm5-e4dw-6ffe
15
vulnerability VCID-aar2-398x-p3d8
16
vulnerability VCID-atus-ryef-17h1
17
vulnerability VCID-axzz-cadr-b7fv
18
vulnerability VCID-dk58-p9py-rka9
19
vulnerability VCID-e2gy-1c6a-6fdf
20
vulnerability VCID-e72e-axdj-7qfw
21
vulnerability VCID-f4ka-47dk-zffs
22
vulnerability VCID-fu9h-e3jx-abe2
23
vulnerability VCID-g3vd-74yh-s7bn
24
vulnerability VCID-gmjm-6ck2-skgu
25
vulnerability VCID-hqzu-shyu-j3hp
26
vulnerability VCID-j1m6-79yt-f7h5
27
vulnerability VCID-jw6e-g8z9-43ej
28
vulnerability VCID-jzta-navk-87bn
29
vulnerability VCID-nnye-4xbb-kuf5
30
vulnerability VCID-nxb3-55eu-auhp
31
vulnerability VCID-pq53-6deg-abfx
32
vulnerability VCID-qhqg-ekuv-z7fc
33
vulnerability VCID-redv-2x5y-8khx
34
vulnerability VCID-s37s-p75k-27e6
35
vulnerability VCID-se44-f85s-xyex
36
vulnerability VCID-sk1w-8yt4-93cv
37
vulnerability VCID-tcmv-6ftg-fqen
38
vulnerability VCID-vsta-e8jg-4qa8
39
vulnerability VCID-wtke-y2cx-x3et
40
vulnerability VCID-xjj5-fy4e-e7ha
41
vulnerability VCID-y9hs-ymcm-3ucx
42
vulnerability VCID-yusx-ncpv-sfhg
43
vulnerability VCID-yvcg-96dp-r7e6
44
vulnerability VCID-zm75-zwps-h3fv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@7.0.0
2
url pkg:maven/org.apache.tomcat/tomcat@7.0.50
purl pkg:maven/org.apache.tomcat/tomcat@7.0.50
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3txt-1psa-5kf5
1
vulnerability VCID-u95s-xhwk-vka6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@7.0.50
3
url pkg:maven/org.apache.tomcat/tomcat@8.0.0-RC1
purl pkg:maven/org.apache.tomcat/tomcat@8.0.0-RC1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3txt-1psa-5kf5
1
vulnerability VCID-4qcn-52ug-mbd5
2
vulnerability VCID-sk1w-8yt4-93cv
3
vulnerability VCID-yusx-ncpv-sfhg
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@8.0.0-RC1
4
url pkg:maven/org.apache.tomcat/tomcat@8.0.1
purl pkg:maven/org.apache.tomcat/tomcat@8.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3txt-1psa-5kf5
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@8.0.1
5
url pkg:maven/org.apache.tomcat/tomcat-coyote@7-alpha0
purl pkg:maven/org.apache.tomcat/tomcat-coyote@7-alpha0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3txt-1psa-5kf5
1
vulnerability VCID-65ge-6jvh-3ffy
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-coyote@7-alpha0
6
url pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.51
purl pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.51
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3txt-1psa-5kf5
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.51
7
url pkg:maven/org.apache.tomcat/tomcat-coyote@8-alpha0
purl pkg:maven/org.apache.tomcat/tomcat-coyote@8-alpha0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3txt-1psa-5kf5
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-coyote@8-alpha0
8
url pkg:maven/org.apache.tomcat/tomcat-coyote@8.0.1
purl pkg:maven/org.apache.tomcat/tomcat-coyote@8.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3txt-1psa-5kf5
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-coyote@8.0.1
References
0
reference_url http://advisories.mageia.org/MGASA-2014-0110.html
reference_id
reference_type
scores
url http://advisories.mageia.org/MGASA-2014-0110.html
1
reference_url http://jvndb.jvn.jp/jvndb/JVNDB-2014-000017
reference_id
reference_type
scores
url http://jvndb.jvn.jp/jvndb/JVNDB-2014-000017
2
reference_url http://jvn.jp/en/jp/JVN14876762/index.html
reference_id
reference_type
scores
url http://jvn.jp/en/jp/JVN14876762/index.html
3
reference_url http://mail-archives.apache.org/mod_mbox/commons-dev/201402.mbox/%3C52F373FC.9030907@apache.org%3E
reference_id
reference_type
scores
url http://mail-archives.apache.org/mod_mbox/commons-dev/201402.mbox/%3C52F373FC.9030907@apache.org%3E
4
reference_url http://mail-archives.apache.org/mod_mbox/www-announce/201402.mbox/%3C52F373FC.9030907@apache.org%3E
reference_id
reference_type
scores
url http://mail-archives.apache.org/mod_mbox/www-announce/201402.mbox/%3C52F373FC.9030907@apache.org%3E
5
reference_url http://marc.info/?l=bugtraq&m=143136844732487&w=2
reference_id
reference_type
scores
url http://marc.info/?l=bugtraq&m=143136844732487&w=2
6
reference_url http://packetstormsecurity.com/files/127215/VMware-Security-Advisory-2014-0007.html
reference_id
reference_type
scores
url http://packetstormsecurity.com/files/127215/VMware-Security-Advisory-2014-0007.html
7
reference_url http://rhn.redhat.com/errata/RHSA-2014-0252.html
reference_id
reference_type
scores
url http://rhn.redhat.com/errata/RHSA-2014-0252.html
8
reference_url http://rhn.redhat.com/errata/RHSA-2014-0253.html
reference_id
reference_type
scores
url http://rhn.redhat.com/errata/RHSA-2014-0253.html
9
reference_url http://rhn.redhat.com/errata/RHSA-2014-0400.html
reference_id
reference_type
scores
url http://rhn.redhat.com/errata/RHSA-2014-0400.html
10
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1062337
reference_id
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1062337
11
reference_url http://seclists.org/fulldisclosure/2014/Dec/23
reference_id
reference_type
scores
url http://seclists.org/fulldisclosure/2014/Dec/23
12
reference_url http://secunia.com/advisories/57915
reference_id
reference_type
scores
url http://secunia.com/advisories/57915
13
reference_url http://secunia.com/advisories/58075
reference_id
reference_type
scores
url http://secunia.com/advisories/58075
14
reference_url http://secunia.com/advisories/58976
reference_id
reference_type
scores
url http://secunia.com/advisories/58976
15
reference_url http://secunia.com/advisories/59039
reference_id
reference_type
scores
url http://secunia.com/advisories/59039
16
reference_url http://secunia.com/advisories/59041
reference_id
reference_type
scores
url http://secunia.com/advisories/59041
17
reference_url http://secunia.com/advisories/59183
reference_id
reference_type
scores
url http://secunia.com/advisories/59183
18
reference_url http://secunia.com/advisories/59184
reference_id
reference_type
scores
url http://secunia.com/advisories/59184
19
reference_url http://secunia.com/advisories/59185
reference_id
reference_type
scores
url http://secunia.com/advisories/59185
20
reference_url http://secunia.com/advisories/59187
reference_id
reference_type
scores
url http://secunia.com/advisories/59187
21
reference_url http://secunia.com/advisories/59232
reference_id
reference_type
scores
url http://secunia.com/advisories/59232
22
reference_url http://secunia.com/advisories/59399
reference_id
reference_type
scores
url http://secunia.com/advisories/59399
23
reference_url http://secunia.com/advisories/59492
reference_id
reference_type
scores
url http://secunia.com/advisories/59492
24
reference_url http://secunia.com/advisories/59500
reference_id
reference_type
scores
url http://secunia.com/advisories/59500
25
reference_url http://secunia.com/advisories/59725
reference_id
reference_type
scores
url http://secunia.com/advisories/59725
26
reference_url http://secunia.com/advisories/60475
reference_id
reference_type
scores
url http://secunia.com/advisories/60475
27
reference_url http://secunia.com/advisories/60753
reference_id
reference_type
scores
url http://secunia.com/advisories/60753
28
reference_url https://github.com/apache/tomcat/commit/29384723d8d9645b87e05be9fa369a4deeb78b9c
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/29384723d8d9645b87e05be9fa369a4deeb78b9c
29
reference_url https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05324755
reference_id
reference_type
scores
url https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05324755
30
reference_url https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05376917
reference_id
reference_type
scores
url https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05376917
31
reference_url https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722
reference_id
reference_type
scores
url https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722
32
reference_url https://svn.apache.org/viewvc?view=revision&revision=1565143
reference_id
reference_type
scores
url https://svn.apache.org/viewvc?view=revision&revision=1565143
33
reference_url https://svn.apache.org/viewvc?view=revision&revision=1565163
reference_id
reference_type
scores
url https://svn.apache.org/viewvc?view=revision&revision=1565163
34
reference_url https://svn.apache.org/viewvc?view=revision&revision=1565169
reference_id
reference_type
scores
url https://svn.apache.org/viewvc?view=revision&revision=1565169
35
reference_url https://tomcat.apache.org/security-7.html
reference_id
reference_type
scores
url https://tomcat.apache.org/security-7.html
36
reference_url https://tomcat.apache.org/security-8.html
reference_id
reference_type
scores
url https://tomcat.apache.org/security-8.html
37
reference_url http://struts.apache.org/docs/s2-020.html
reference_id
reference_type
scores
url http://struts.apache.org/docs/s2-020.html
38
reference_url http://svn.apache.org/r1565143
reference_id
reference_type
scores
url http://svn.apache.org/r1565143
39
reference_url http://svn.apache.org/viewvc?view=revision&revision=1565143
reference_id
reference_type
scores
url http://svn.apache.org/viewvc?view=revision&revision=1565143
40
reference_url https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0050
reference_id
reference_type
scores
url https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0050
41
reference_url http://tomcat.apache.org/security-7.html
reference_id
reference_type
scores
url http://tomcat.apache.org/security-7.html
42
reference_url http://tomcat.apache.org/security-8.html
reference_id
reference_type
scores
url http://tomcat.apache.org/security-8.html
43
reference_url http://www-01.ibm.com/support/docview.wss?uid=swg21669554
reference_id
reference_type
scores
url http://www-01.ibm.com/support/docview.wss?uid=swg21669554
44
reference_url http://www-01.ibm.com/support/docview.wss?uid=swg21675432
reference_id
reference_type
scores
url http://www-01.ibm.com/support/docview.wss?uid=swg21675432
45
reference_url http://www-01.ibm.com/support/docview.wss?uid=swg21676091
reference_id
reference_type
scores
url http://www-01.ibm.com/support/docview.wss?uid=swg21676091
46
reference_url http://www-01.ibm.com/support/docview.wss?uid=swg21676092
reference_id
reference_type
scores
url http://www-01.ibm.com/support/docview.wss?uid=swg21676092
47
reference_url http://www-01.ibm.com/support/docview.wss?uid=swg21676401
reference_id
reference_type
scores
url http://www-01.ibm.com/support/docview.wss?uid=swg21676401
48
reference_url http://www-01.ibm.com/support/docview.wss?uid=swg21676403
reference_id
reference_type
scores
url http://www-01.ibm.com/support/docview.wss?uid=swg21676403
49
reference_url http://www-01.ibm.com/support/docview.wss?uid=swg21676405
reference_id
reference_type
scores
url http://www-01.ibm.com/support/docview.wss?uid=swg21676405
50
reference_url http://www-01.ibm.com/support/docview.wss?uid=swg21676410
reference_id
reference_type
scores
url http://www-01.ibm.com/support/docview.wss?uid=swg21676410
51
reference_url http://www-01.ibm.com/support/docview.wss?uid=swg21676656
reference_id
reference_type
scores
url http://www-01.ibm.com/support/docview.wss?uid=swg21676656
52
reference_url http://www-01.ibm.com/support/docview.wss?uid=swg21676853
reference_id
reference_type
scores
url http://www-01.ibm.com/support/docview.wss?uid=swg21676853
53
reference_url http://www-01.ibm.com/support/docview.wss?uid=swg21677691
reference_id
reference_type
scores
url http://www-01.ibm.com/support/docview.wss?uid=swg21677691
54
reference_url http://www-01.ibm.com/support/docview.wss?uid=swg21677724
reference_id
reference_type
scores
url http://www-01.ibm.com/support/docview.wss?uid=swg21677724
55
reference_url http://www-01.ibm.com/support/docview.wss?uid=swg21681214
reference_id
reference_type
scores
url http://www-01.ibm.com/support/docview.wss?uid=swg21681214
56
reference_url http://www.debian.org/security/2014/dsa-2856
reference_id
reference_type
scores
url http://www.debian.org/security/2014/dsa-2856
57
reference_url http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS14-015/index.html
reference_id
reference_type
scores
url http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS14-015/index.html
58
reference_url http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS14-016/index.html
reference_id
reference_type
scores
url http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS14-016/index.html
59
reference_url http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS14-017/index.html
reference_id
reference_type
scores
url http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS14-017/index.html
60
reference_url http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-350733.htm
reference_id
reference_type
scores
url http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-350733.htm
61
reference_url http://www.mandriva.com/security/advisories?name=MDVSA-2015:084
reference_id
reference_type
scores
url http://www.mandriva.com/security/advisories?name=MDVSA-2015:084
62
reference_url http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
reference_id
reference_type
scores
url http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
63
reference_url http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
reference_id
reference_type
scores
url http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
64
reference_url http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html
reference_id
reference_type
scores
url http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html
65
reference_url http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html
reference_id
reference_type
scores
url http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html
66
reference_url http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html
reference_id
reference_type
scores
url http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html
67
reference_url http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html
reference_id
reference_type
scores
url http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html
68
reference_url http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
reference_id
reference_type
scores
url http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
69
reference_url http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html
reference_id
reference_type
scores
url http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html
70
reference_url http://www.securityfocus.com/archive/1/532549/100/0/threaded
reference_id
reference_type
scores
url http://www.securityfocus.com/archive/1/532549/100/0/threaded
71
reference_url http://www.securityfocus.com/archive/1/534161/100/0/threaded
reference_id
reference_type
scores
url http://www.securityfocus.com/archive/1/534161/100/0/threaded
72
reference_url http://www.securityfocus.com/bid/65400
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/65400
73
reference_url http://www.ubuntu.com/usn/USN-2130-1
reference_id
reference_type
scores
url http://www.ubuntu.com/usn/USN-2130-1
74
reference_url http://www.vmware.com/security/advisories/VMSA-2014-0007.html
reference_id
reference_type
scores
url http://www.vmware.com/security/advisories/VMSA-2014-0007.html
75
reference_url http://www.vmware.com/security/advisories/VMSA-2014-0008.html
reference_id
reference_type
scores
url http://www.vmware.com/security/advisories/VMSA-2014-0008.html
76
reference_url http://www.vmware.com/security/advisories/VMSA-2014-0012.html
reference_id
reference_type
scores
url http://www.vmware.com/security/advisories/VMSA-2014-0012.html
77
reference_url https://nvd.nist.gov/vuln/detail/CVE-2014-0050
reference_id CVE-2014-0050
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2014-0050
78
reference_url http://blog.spiderlabs.com/2014/02/cve-2014-0050-exploit-with-boundaries-loops-without-boundaries.html
reference_id CVE-2014-0050-EXPLOIT-WITH-BOUNDARIES-LOOPS-WITHOUT-BOUNDARIES.HTML
reference_type
scores
url http://blog.spiderlabs.com/2014/02/cve-2014-0050-exploit-with-boundaries-loops-without-boundaries.html
79
reference_url https://github.com/advisories/GHSA-xx68-jfcg-xmmf
reference_id GHSA-xx68-jfcg-xmmf
reference_type
scores
url https://github.com/advisories/GHSA-xx68-jfcg-xmmf
Weaknesses
0
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
1
cwe_id 264
name Permissions, Privileges, and Access Controls
description Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
2
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
Exploits
Severity_range_scorenull
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-3txt-1psa-5kf5