CVE-2014-0099: Integer Overflow
Integer overflow in java/org/apache/tomcat/util/buf/Ascii.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4, when operated behind a reverse proxy, allows remote attackers to conduct HTTP request smuggling attacks via a crafted Content-Length HTTP header.
Other sources
It was found that the code used to parse the request content length header did not check for overflow in the result. This exposed a request smuggling vulnerability when Tomcat was located behind a reverse proxy that correctly processed the content length header.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-0099?
CVE-2014-0099 has a medium severity rating and can lead to HTTP request smuggling attacks.
How do I fix CVE-2014-0099?
To fix CVE-2014-0099, update Apache Tomcat to version 6.0.40 or later, 7.x to version 7.0.53 or later, or 8.x to 8.0.4 or later.
What version of Tomcat is affected by CVE-2014-0099?
CVE-2014-0099 affects Apache Tomcat versions before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4.
Can CVE-2014-0099 be exploited remotely?
Yes, CVE-2014-0099 allows remote attackers to exploit the vulnerability when Tomcat is operated behind a reverse proxy.
What types of attacks can CVE-2014-0099 enable?
CVE-2014-0099 can enable attackers to conduct HTTP request smuggling attacks via crafted Content-Length HTTP headers.