Lucene search

[email protected]CVE-2014-2537

HistoryMar 18, 2014 - 5:04 p.m.

CVE-2014-2537

2014-03-1817:04:00

CWE-399

[email protected]

web.nvd.nist.gov

sophos

utm

9.109

tcp stack

memory leak

cve-2014-2537

nvd

denial of service

6.8 Medium

AI Score

Confidence

Low

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.013 Low

EPSS

Percentile

85.7%

JSON

Memory leak in the TCP stack in the kernel in Sophos UTM before 9.109 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors.

CPENameOperatorVersion
sophos:unified_threat_management_softwaresophos unified threat management softwarele9.108
sophos:unified_threat_management_softwaresophos unified threat management softwareeq8.3
sophos:unified_threat_management_softwaresophos unified threat management softwareeq9.007
sophos:unified_threat_management_softwaresophos unified threat management softwareeq9.107
sophos:unified_threat_managementsophos unified threat managementeq110
sophos:unified_threat_managementsophos unified threat managementeq120
sophos:unified_threat_managementsophos unified threat managementeq220
sophos:unified_threat_managementsophos unified threat managementeq320
sophos:unified_threat_managementsophos unified threat managementeq425
sophos:unified_threat_managementsophos unified threat managementeq525

CPE	Name	Operator	Version
sophos:unified_threat_management_software	sophos unified threat management software	le	9.108
sophos:unified_threat_management_software	sophos unified threat management software	eq	8.3
sophos:unified_threat_management_software	sophos unified threat management software	eq	9.007
sophos:unified_threat_management_software	sophos unified threat management software	eq	9.107
sophos:unified_threat_management	sophos unified threat management	eq	110
sophos:unified_threat_management	sophos unified threat management	eq	120
sophos:unified_threat_management	sophos unified threat management	eq	220
sophos:unified_threat_management	sophos unified threat management	eq	320
sophos:unified_threat_management	sophos unified threat management	eq	425
sophos:unified_threat_management	sophos unified threat management	eq	525

Rows per page:

1-10 of 111

References

blogs.sophos.com/2014/02/20/utm-up2date-9-109/

secunia.com/advisories/57344

www.securityfocus.com/bid/66231

www.securitytracker.com/id/1029920

6.8 Medium

AI Score

Confidence

Low

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.013 Low

EPSS

Percentile

85.7%

JSON

Related for CVE-2014-2537

prion1 kaspersky1