CVE-2014-0227
Tomcat/JBossWeb: request smuggling and limited DoS in ChunkedInputFilter
Severity
ModerateRed Hat Product Security
CVSS 2.0
Review impact separately from score.
Published · February 9, 2015
Updated · August 5, 2026
Description
It was discovered that the ChunkedInputFilter in Tomcat did not fail subsequent attempts to read input after malformed chunked encoding was detected. A remote attacker could possibly use this flaw to make Tomcat process part of the request body as new request, or cause a denial of service.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 2.0 · 4.3AV:N/AC:M/Au:N/C:N/I:P/A:N
CWE-400 · Uncontrolled Resource Consumption