The MultipartStream class in Apache Commons Fileupload before 1.3.2, as used in Apache Tomcat 7.x before 7.0.70, 8.x before 8.0.36, 8.5.x before 8.5.3, and 9.x before 9.0.0.M7 and other products, allows remote attackers to cause a denial of service (CPU consumption) via a long boundary string.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
|
Configuration 6 (hide)
|
Configuration 7 (hide)
|
Configuration 8 (hide)
|
Information
Published : 2016-07-04 15:59
Updated : 2021-07-17 01:15
NVD link : CVE-2016-3092
Mitre link : CVE-2016-3092
JSON object : View
CWE
CWE-20
Improper Input Validation
Products Affected
hp
- icewall_sso_agent_option
- icewall_identity_manager
apache
- commons_fileupload
- tomcat
canonical
- ubuntu_linux
debian
- debian_linux