The Vulnerability History Project

Fix CVE-2014-0050 DoS with malformed Content-Type header and multipart request processing.

      Update to latest code (r1565159) from Commons FileUpload

git-svn-id: https://svn.apache.org/repos/asf/tomcat/trunk@1565163 13f79535-47bb-0310-9956-ffa450edef68

by Pauline the Wren 2014-02-06 11:08:00 UTC

commit 29384723d8d9645b87e05be9fa369a4deeb78b9c

Tomcat Fix Multipart Infinite Loop CVE-2014-0050 Fix FileUpload tiny buffer CVE-2016-3092

java/org/apache/tomcat/util/http/fileupload/FileUploadBase.java

+5 -13

java/org/apache/tomcat/util/http/fileupload/MultipartStream.java

+5 -8

webapps/docs/changelog.xml

-5

expand_less