CVE WatchOct 14, 2026

CVE-2014-0227

java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat 6.x before 6.0.42, 7.x before 7.0.55, and 8.x before 8.0.9 do

CVSS

6.4

No CVSS

EPSS

21.0%

p98

KEV

—

Exploit Today

0-100

Published: Feb 16, 2015 · Last modified: Oct 14, 2026 · CWE-19

EPSS · 30d

21.0%EPSS · 30 days21.0%

2026-09-252026-10-23

Technical description

java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat 6.x before 6.0.42, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle attempts to continue reading data after an error has occurred, which allows remote attackers to conduct HTTP request smuggling attacks or cause a denial of service (resource consumption) by streaming data with malformed chunked transfer coding.

Official references

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2025-203117.4 HIG

9.6%

——3A vulnerability in the handling of certain Ethernet frames in Cisco IOS XE Software for Catalyst 9000 Series Switches could allow an unauthenticated, adjacent attacker to cause an egress port to become blocked and drop all outbound traffic. This vulnerability is due to improper handling of crafted Ethernet frames. An attacker could exploit this vulnerability by sending crafted Ethernet frames through an affected switch. A successful exploit could allow the attacker to cause the egress port to which the crafted frame is forwarded to start dropping all frames, resulting in a denial of service (DoS) condition.28d CVE-2015-75755.9 MED

86.9%

——26Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exchange messages in TLS 1.2 Handshake Protocol traffic, which makes it easier for man-in-the-middle attackers to spoof servers by triggering a collision.9d CVE-2015-54777.5 HIG

99.9%

KEV—80 ISC BIND Data Processing Errors Vulnerability14d