CVE-2014-0075: Integer overflow in the parseChunkHeader function in java/org/apache/coyote/http11/filters/ChunkedInputFilt...

Security readout for executives and security teams

CVE-2014-0075 is a remote denial-of-service flaw in older Apache Tomcat versions. A malformed HTTP chunk size can trigger excessive resource use while Tomcat streams request data. The business risk is service disruption for applications still running unfixed Tomcat or products that embed vulnerable Tomcat. Exposure is most likely on internet-facing Java web applications using old standalone Tomcat, distribution-packaged Tomcat, or vendor appliances/products embedding Tomcat. Modern supported Tomcat builds should not be affected if patched beyond the fixed versions. Treat this as a patch-verification item for legacy Java estates. It is not marked as actively exploited in the provided sources, but exposed vulnerable Tomcat could be remotely disrupted, affecting availability of business applications. Mitigation focus: Upgrade Tomcat to 6.0.40, 7.0.53, 8.0.4, or later supported releases.; Apply relevant vendor distribution updates for packaged or embedded Tomcat deployments.; Check vendor advisories for VMware, IBM, Red Hat, Debian, Oracle, Mageia, and similar products..

Prepared

Jun 14, 2026, 14:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.