Published: 04/07/2016 Updated: 08/12/2023

CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 694

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C

The MultipartStream class in Apache Commons Fileupload prior to 1.3.2, as used in Apache Tomcat 7.x prior to 7.0.70, 8.x prior to 8.0.36, 8.5.x prior to 8.5.3, and 9.x prior to 9.0.0.M7 and other products, allows remote malicious users to cause a denial of service (CPU consumption) via a long boundary string.

Vulnerable Product	Search on Vulmon	Subscribe to Product
hp icewall sso agent option 10.0
hp icewall identity manager 5.0
apache tomcat 9.0.0
apache tomcat 8.0.30
apache tomcat 8.0.17
apache tomcat 8.0.26
apache tomcat 8.0.20
apache tomcat 8.0.5
apache tomcat 8.0.1
apache tomcat 8.0.0
apache tomcat 8.0.12
apache tomcat 8.0.27
apache tomcat 8.0.15
apache tomcat 8.0.22
apache tomcat 8.0.29
apache tomcat 8.0.11
apache tomcat 8.0.24
apache tomcat 8.0.23
apache tomcat 8.0.33
apache tomcat 8.0.21
apache tomcat 8.0.32
apache tomcat 8.0.18
apache tomcat 8.0.35
apache tomcat 8.0.3
apache tomcat 8.0.14
apache tomcat 8.0.8
apache tomcat 8.0.28
debian debian linux 8.0
apache tomcat 8.5.2
apache tomcat 8.5.0
apache commons fileupload
canonical ubuntu linux 12.04
canonical ubuntu linux 16.04
canonical ubuntu linux 15.10
canonical ubuntu linux 14.04
apache tomcat 7.0.2
apache tomcat 7.0.12
apache tomcat 7.0.62
apache tomcat 7.0.53
apache tomcat 7.0.20
apache tomcat 7.0.34
apache tomcat 7.0.8
apache tomcat 7.0.55
apache tomcat 7.0.1
apache tomcat 7.0.5
apache tomcat 7.0.4
apache tomcat 7.0.63
apache tomcat 7.0.22
apache tomcat 7.0.39
apache tomcat 7.0.26
apache tomcat 7.0.28
apache tomcat 7.0.59
apache tomcat 7.0.65
apache tomcat 7.0.0
apache tomcat 7.0.50
apache tomcat 7.0.6
apache tomcat 7.0.14
apache tomcat 7.0.11
apache tomcat 7.0.67
apache tomcat 7.0.23
apache tomcat 7.0.69
apache tomcat 7.0.52
apache tomcat 7.0.42
apache tomcat 7.0.37
apache tomcat 7.0.29
apache tomcat 7.0.68
apache tomcat 7.0.47
apache tomcat 7.0.41
apache tomcat 7.0.30
apache tomcat 7.0.19
apache tomcat 7.0.16
apache tomcat 7.0.10
apache tomcat 7.0.25
apache tomcat 7.0.54
apache tomcat 7.0.35
apache tomcat 7.0.61
apache tomcat 7.0.57
apache tomcat 7.0.32
apache tomcat 7.0.21
apache tomcat 7.0.27
apache tomcat 7.0.40
apache tomcat 7.0.56
apache tomcat 7.0.64
apache tomcat 7.0.33

Several security issues were fixed in Tomcat ...

Tomcat could be made to hang if it received specially crafted network traffic ...

The TERASOLUNA Framework Development Team discovered a denial of service vulnerability in Apache Commons FileUpload, a package to make it easy to add robust, high-performance, file upload capability to servlets and web applications A remote attacker can take advantage of this flaw by sending file upload requests that cause the HTTP server using th ...

Multiple security vulnerabilities have been discovered in the Tomcat servlet and JSP engine, which may result in information disclosure, the bypass of CSRF protections, bypass of the SecurityManager or denial of service For the stable distribution (jessie), these problems have been fixed in version 8014-1+deb8u2 For the unstable distribution (s ...

Synopsis Important: Red Hat JBoss Web Server 212 security update for Tomcat 7 Type/Severity Security Advisory: Important Topic An update is now available for Red Hat JBoss Web ServerRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring Sys ...

Synopsis Moderate: jboss-ec2-eap security and enhancement update for EAP 6411 Type/Severity Security Advisory: Moderate Topic An update for jboss-ec2-eap is now available for Red Hat JBoss Enterprise Application Platform 64 for Red Hat Enterprise Linux 6Red Hat Product Security has rated this update as ...

Synopsis Moderate: Red Hat JBoss Enterprise Application Platform 6411 update on RHEL 7 Type/Severity Security Advisory: Moderate Topic Updated packages that provide Red Hat JBoss Enterprise Application Platform 6411, fix several bugs, and add various enhancements are now available for Red Hat Enterprise ...

Synopsis Moderate: Red Hat JBoss Enterprise Application Platform 6411 update on RHEL 5 Type/Severity Security Advisory: Moderate Topic Updated packages that provide Red Hat JBoss Enterprise Application Platform 6411, fix several bugs, and add various enhancements are now available for Red Hat Enterprise ...

Synopsis Important: Red Hat JBoss Web Server 212 security update for Tomcat 7 Type/Severity Security Advisory: Important Topic An update is now available for Red Hat JBoss Enterprise Web Server 2 for RHEL 6 and Red Hat JBoss Enterprise Web Server 2 for RHEL 7Red Hat Product Security has rated this update ...

Synopsis Moderate: Red Hat JBoss Enterprise Application Platform 6411 update on RHEL 6 Type/Severity Security Advisory: Moderate Topic Updated packages that provide Red Hat JBoss Enterprise Application Platform 6411, fix several bugs, and add various enhancements are now available for Red Hat Enterprise ...

Synopsis Important: Red Hat JBoss Web Server security and enhancement update Type/Severity Security Advisory: Important Topic An update is now available for Red Hat JBoss Web ServerRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System ...

A denial of service vulnerability was identified in Commons FileUpload that occurred when the length of the multipart boundary was just below the size of the buffer (4096 bytes) used to read the uploaded file if the boundary was the typical tens of bytes long ...

Get Started

CVE-2016-3092

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect