Description

MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted Content-Type header that bypasses a loop's intended exit conditions.

Mitigation

We recommend upgrading to a version of this component that is not vulnerable to this specific issue or limiting the size of the Content Header of a multipart request to 4091 bytes or less.

Related links:

• http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0050

• http://www.rapid7.com/db/modules/auxiliary/dos/http/apache_commons_fileupload_dos

• https://www.trustwave.com/Resources/SpiderLabs-Blog/CVE-2014-0050–Exploit-with-Boundaries

• -Loops-without-Boundaries/

• http://mail-archives.apache.org/mod_mbox/www-announce/201402.mbox/%[email protected]%3E