CVE-2014-0227 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2014-0227 Interim 1 22 2025-11-05T05:13:02Z current 2021-05-30T13:17:46Z 2025-11-05T05:13:02Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2014-0227 java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat 6.x before 6.0.42, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle attempts to continue reading data after an error has occurred, which allows remote attackers to conduct HTTP request smuggling attacks or cause a denial of service (resource consumption) by streaming data with malformed chunked transfer coding. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2015-August/001523.html E-Mail link for SUSE-SU-2015:1337-1 https://lists.suse.com/pipermail/sle-security-updates/2015-September/001594.html E-Mail link for SUSE-SU-2015:1565-1 https://www.suse.com/support/kb/doc/?id=7016198 E-Mail link for TID7016198 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Liberty Linux 7 SUSE Linux Enterprise Server 11 SP1-TERADATA SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-TERADATA SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 11 SP4 LTSS SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server for SAP Applications 11 SP3 SUSE Linux Enterprise Server for SAP Applications 11 SP4 tomcat tomcat-7.0.54-2.el7_1 tomcat-admin-webapps tomcat-admin-webapps-7.0.54-2.el7_1 tomcat-docs-webapp tomcat-docs-webapp-7.0.54-2.el7_1 tomcat-el-2.2-api-7.0.54-2.el7_1 tomcat-el-2_2-api tomcat-javadoc tomcat-javadoc-7.0.54-2.el7_1 tomcat-jsp-2.2-api-7.0.54-2.el7_1 tomcat-jsp-2_2-api tomcat-jsvc-7.0.54-2.el7_1 tomcat-lib tomcat-lib-7.0.54-2.el7_1 tomcat-servlet-3.0-api-7.0.54-2.el7_1 tomcat-servlet-3_0-api tomcat-webapps tomcat-webapps-7.0.54-2.el7_1 tomcat6 tomcat6-6.0.41-0.45.1 tomcat6-6.0.41-0.47.1 tomcat6-admin-webapps-6.0.41-0.45.1 tomcat6-admin-webapps-6.0.41-0.47.1 tomcat6-docs-webapp-6.0.41-0.45.1 tomcat6-docs-webapp-6.0.41-0.47.1 tomcat6-javadoc-6.0.41-0.45.1 tomcat6-javadoc-6.0.41-0.47.1 tomcat6-jsp-2_1-api-6.0.41-0.45.1 tomcat6-jsp-2_1-api-6.0.41-0.47.1 tomcat6-lib-6.0.41-0.45.1 tomcat6-lib-6.0.41-0.47.1 tomcat6-servlet-2_5-api-6.0.41-0.45.1 tomcat6-servlet-2_5-api-6.0.41-0.47.1 tomcat6-webapps-6.0.41-0.45.1 tomcat6-webapps-6.0.41-0.47.1 tomcat-7.0.54-2.el7_1 as a component of SUSE Liberty Linux 7 tomcat-admin-webapps-7.0.54-2.el7_1 as a component of SUSE Liberty Linux 7 tomcat-docs-webapp-7.0.54-2.el7_1 as a component of SUSE Liberty Linux 7 tomcat-el-2.2-api-7.0.54-2.el7_1 as a component of SUSE Liberty Linux 7 tomcat-javadoc-7.0.54-2.el7_1 as a component of SUSE Liberty Linux 7 tomcat-jsp-2.2-api-7.0.54-2.el7_1 as a component of SUSE Liberty Linux 7 tomcat-jsvc-7.0.54-2.el7_1 as a component of SUSE Liberty Linux 7 tomcat-lib-7.0.54-2.el7_1 as a component of SUSE Liberty Linux 7 tomcat-servlet-3.0-api-7.0.54-2.el7_1 as a component of SUSE Liberty Linux 7 tomcat-webapps-7.0.54-2.el7_1 as a component of SUSE Liberty Linux 7 tomcat6-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA tomcat6-admin-webapps-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA tomcat6-docs-webapp-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA tomcat6-javadoc-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA tomcat6-jsp-2_1-api-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA tomcat6-lib-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA tomcat6-servlet-2_5-api-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA tomcat6-webapps-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA tomcat6-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP3 tomcat6-admin-webapps-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP3 tomcat6-docs-webapp-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP3 tomcat6-javadoc-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP3 tomcat6-jsp-2_1-api-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP3 tomcat6-lib-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP3 tomcat6-servlet-2_5-api-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP3 tomcat6-webapps-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP3 tomcat6-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA tomcat6-admin-webapps-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA tomcat6-docs-webapp-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA tomcat6-javadoc-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA tomcat6-jsp-2_1-api-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA tomcat6-lib-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA tomcat6-servlet-2_5-api-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA tomcat6-webapps-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA tomcat6-6.0.41-0.47.1 as a component of SUSE Linux Enterprise Server 11 SP4 tomcat6-admin-webapps-6.0.41-0.47.1 as a component of SUSE Linux Enterprise Server 11 SP4 tomcat6-docs-webapp-6.0.41-0.47.1 as a component of SUSE Linux Enterprise Server 11 SP4 tomcat6-javadoc-6.0.41-0.47.1 as a component of SUSE Linux Enterprise Server 11 SP4 tomcat6-jsp-2_1-api-6.0.41-0.47.1 as a component of SUSE Linux Enterprise Server 11 SP4 tomcat6-lib-6.0.41-0.47.1 as a component of SUSE Linux Enterprise Server 11 SP4 tomcat6-servlet-2_5-api-6.0.41-0.47.1 as a component of SUSE Linux Enterprise Server 11 SP4 tomcat6-webapps-6.0.41-0.47.1 as a component of SUSE Linux Enterprise Server 11 SP4 tomcat6-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 tomcat6-admin-webapps-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 tomcat6-docs-webapp-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 tomcat6-javadoc-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 tomcat6-jsp-2_1-api-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 tomcat6-lib-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 tomcat6-servlet-2_5-api-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 tomcat6-webapps-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 tomcat6-6.0.41-0.47.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 tomcat6-admin-webapps-6.0.41-0.47.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 tomcat6-docs-webapp-6.0.41-0.47.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 tomcat6-javadoc-6.0.41-0.47.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 tomcat6-jsp-2_1-api-6.0.41-0.47.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 tomcat6-lib-6.0.41-0.47.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 tomcat6-servlet-2_5-api-6.0.41-0.47.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 tomcat6-webapps-6.0.41-0.47.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 tomcat6 as a component of SUSE Linux Enterprise Server 11 SP4 LTSS tomcat as a component of SUSE Linux Enterprise Server 12 tomcat-admin-webapps as a component of SUSE Linux Enterprise Server 12 tomcat-docs-webapp as a component of SUSE Linux Enterprise Server 12 tomcat-el-2_2-api as a component of SUSE Linux Enterprise Server 12 tomcat-javadoc as a component of SUSE Linux Enterprise Server 12 tomcat-jsp-2_2-api as a component of SUSE Linux Enterprise Server 12 tomcat-lib as a component of SUSE Linux Enterprise Server 12 tomcat-servlet-3_0-api as a component of SUSE Linux Enterprise Server 12 tomcat-webapps as a component of SUSE Linux Enterprise Server 12 java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat 6.x before 6.0.42, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle attempts to continue reading data after an error has occurred, which allows remote attackers to conduct HTTP request smuggling attacks or cause a denial of service (resource consumption) by streaming data with malformed chunked transfer coding. CVE-2014-0227 SUSE Liberty Linux 7:tomcat-7.0.54-2.el7_1 SUSE Liberty Linux 7:tomcat-admin-webapps-7.0.54-2.el7_1 SUSE Liberty Linux 7:tomcat-docs-webapp-7.0.54-2.el7_1 SUSE Liberty Linux 7:tomcat-el-2.2-api-7.0.54-2.el7_1 SUSE Liberty Linux 7:tomcat-javadoc-7.0.54-2.el7_1 SUSE Liberty Linux 7:tomcat-jsp-2.2-api-7.0.54-2.el7_1 SUSE Liberty Linux 7:tomcat-jsvc-7.0.54-2.el7_1 SUSE Liberty Linux 7:tomcat-lib-7.0.54-2.el7_1 SUSE Liberty Linux 7:tomcat-servlet-3.0-api-7.0.54-2.el7_1 SUSE Liberty Linux 7:tomcat-webapps-7.0.54-2.el7_1 SUSE Linux Enterprise Server 11 SP1-TERADATA:tomcat6-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:tomcat6-admin-webapps-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:tomcat6-docs-webapp-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:tomcat6-javadoc-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:tomcat6-jsp-2_1-api-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:tomcat6-lib-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:tomcat6-servlet-2_5-api-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:tomcat6-webapps-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP3:tomcat6-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP3:tomcat6-admin-webapps-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP3:tomcat6-docs-webapp-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP3:tomcat6-javadoc-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP3:tomcat6-jsp-2_1-api-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP3:tomcat6-lib-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP3:tomcat6-servlet-2_5-api-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP3:tomcat6-webapps-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-admin-webapps-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-docs-webapp-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-javadoc-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-jsp-2_1-api-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-lib-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-servlet-2_5-api-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-webapps-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP4:tomcat6-6.0.41-0.47.1 SUSE Linux Enterprise Server 11 SP4:tomcat6-admin-webapps-6.0.41-0.47.1 SUSE Linux Enterprise Server 11 SP4:tomcat6-docs-webapp-6.0.41-0.47.1 SUSE Linux Enterprise Server 11 SP4:tomcat6-javadoc-6.0.41-0.47.1 SUSE Linux Enterprise Server 11 SP4:tomcat6-jsp-2_1-api-6.0.41-0.47.1 SUSE Linux Enterprise Server 11 SP4:tomcat6-lib-6.0.41-0.47.1 SUSE Linux Enterprise Server 11 SP4:tomcat6-servlet-2_5-api-6.0.41-0.47.1 SUSE Linux Enterprise Server 11 SP4:tomcat6-webapps-6.0.41-0.47.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-6.0.41-0.45.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-admin-webapps-6.0.41-0.45.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-docs-webapp-6.0.41-0.45.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-javadoc-6.0.41-0.45.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-jsp-2_1-api-6.0.41-0.45.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-lib-6.0.41-0.45.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-servlet-2_5-api-6.0.41-0.45.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-webapps-6.0.41-0.45.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-6.0.41-0.47.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-admin-webapps-6.0.41-0.47.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-docs-webapp-6.0.41-0.47.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-javadoc-6.0.41-0.47.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-jsp-2_1-api-6.0.41-0.47.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-lib-6.0.41-0.47.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-servlet-2_5-api-6.0.41-0.47.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-webapps-6.0.41-0.47.1 SUSE Linux Enterprise Server 12:tomcat SUSE Linux Enterprise Server 12:tomcat-admin-webapps SUSE Linux Enterprise Server 12:tomcat-docs-webapp SUSE Linux Enterprise Server 12:tomcat-el-2_2-api SUSE Linux Enterprise Server 12:tomcat-javadoc SUSE Linux Enterprise Server 12:tomcat-jsp-2_2-api SUSE Linux Enterprise Server 12:tomcat-lib SUSE Linux Enterprise Server 12:tomcat-servlet-3_0-api SUSE Linux Enterprise Server 12:tomcat-webapps moderate 6.4 AV:N/AC:L/Au:N/C:N/I:P/A:P