CVE-2014-0075: Integer Overflow or Wraparound in Apache Tomcat
Summary
CVE-2014-0075: Integer Overflow or Wraparound in Apache Tomcat. Affects org.apache.tomcat:tomcat across 3 version ranges.
< 6.0.40
>= 7.0.0, < 7.0.53
>= 8.0.0, < 8.0.4
Fixed in 6.0.40, 7.0.53 or 8.0.4, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Apache Tomcat is an open-source web server and servlet container that is used to deploy Java-based web applications. It provides a robust and efficient platform for running Java web applications. However, versions before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 are vulnerable to an integer overflow or wraparound vulnerability in the parseChunkHeader function of the ChunkedInputFilter.java file. This vulnerability can be exploited by remote attackers to cause a denial of service by consuming excessive system resources. Chunked transfer coding is a method of encoding the body of an HTTP message for transfer in chunks, and this vulnerability occurs when a malformed chunk size is encountered during the streaming of data.
Vulnerability Detail
The integer overflow or wraparound vulnerability in Apache Tomcat allows remote attackers to cause a denial of service by sending a request with a malformed chunk size in the chunked transfer coding. When the parseChunkHeader function encounters a malformed chunk size, it fails to handle it properly, leading to an integer overflow or wraparound. This can result in excessive resource consumption, potentially leading to a system crash or unresponsiveness. The vulnerability has a moderate severity rating and is classified under CWE-190 (Integer Overflow or Wraparound) and CWE-400 (Uncontrolled Resource Consumption).
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
< 6.0.406.0.40 -
>= 7.0.0, < 7.0.537.0.53 -
>= 8.0.0, < 8.0.48.0.4
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
If upgrading to a fixed version is not immediately possible, a workaround can be implemented by disabling chunked transfer coding in the affected Apache Tomcat server. This can be achieved by modifying the server configuration to remove or comment out the 'chunked' attribute in the 'Transfer-Encoding' header. However, it is important to note that disabling chunked transfer coding may impact the performance and functionality of certain applications that rely on this feature.
Conclusion
The integer overflow or wraparound vulnerability in Apache Tomcat can be mitigated by upgrading to a fixed version or implementing a workaround. It is important to promptly address this vulnerability to ensure the security and stability of the affected Apache Tomcat servers. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for org.apache.tomcat:tomcat →
FAQ
Apache Tomcat is an open-source web server and servlet container that is used to deploy Java-based web applications. It provides a robust and efficient platform for running Java web applications.
Chunked transfer coding is a method of encoding the body of an HTTP message for transfer in chunks. It allows the sender to send a large message in smaller parts, which can be useful for streaming data or when the size of the message is not known in advance.
An integer overflow or wraparound vulnerability occurs when an arithmetic operation results in a value that is too large to be represented by the data type used to store it. This can lead to unexpected behavior or security vulnerabilities, such as resource consumption or buffer overflow.
The integer overflow or wraparound vulnerability in Apache Tomcat can be exploited by remote attackers to cause a denial of service by consuming excessive system resources. This can result in a system crash or unresponsiveness, impacting the availability of the affected server.
You can use Vulert's playground (https://vulert.com/scanner) to check if your Apache Tomcat server is affected by this vulnerability. Vulert is a tool that monitors and alerts in real-time for open-source vulnerabilities in software, using just the pom.xml file. It provides a simple and convenient way to assess the vulnerability status of your applications without requiring access to the code or installation.
References
Related vulnerabilities
Recent vulnerabilities recorded for org.apache.tomcat:tomcat.
