Lucene search

K
nvd[email protected]NVD:CVE-2014-0110
HistoryMay 08, 2014 - 2:29 p.m.

CVE-2014-0110

2014-05-0814:29:13
CWE-399
web.nvd.nist.gov
3

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

6.4

Confidence

High

EPSS

0.009

Percentile

82.4%

Apache CXF before 2.6.14 and 2.7.x before 2.7.11 allows remote attackers to cause a denial of service (/tmp disk consumption) via a large invalid SOAP message.

Affected configurations

Nvd
Node
apachecxfRange2.6.13
OR
apachecxfMatch2.4.0
OR
apachecxfMatch2.4.1
OR
apachecxfMatch2.4.2
OR
apachecxfMatch2.4.3
OR
apachecxfMatch2.4.4
OR
apachecxfMatch2.4.5
OR
apachecxfMatch2.4.6
OR
apachecxfMatch2.4.7
OR
apachecxfMatch2.5.0
OR
apachecxfMatch2.5.1
OR
apachecxfMatch2.5.2
OR
apachecxfMatch2.5.3
OR
apachecxfMatch2.5.4
OR
apachecxfMatch2.5.5
OR
apachecxfMatch2.5.6
OR
apachecxfMatch2.5.7
OR
apachecxfMatch2.5.8
OR
apachecxfMatch2.5.9
OR
apachecxfMatch2.6.0
OR
apachecxfMatch2.6.1
OR
apachecxfMatch2.6.2
OR
apachecxfMatch2.6.3
OR
apachecxfMatch2.6.4
OR
apachecxfMatch2.6.5
OR
apachecxfMatch2.6.6
OR
apachecxfMatch2.6.7
OR
apachecxfMatch2.6.8
OR
apachecxfMatch2.6.9
OR
apachecxfMatch2.6.10
OR
apachecxfMatch2.6.11
OR
apachecxfMatch2.6.12
Node
apachecxfMatch2.7.0
OR
apachecxfMatch2.7.1
OR
apachecxfMatch2.7.2
OR
apachecxfMatch2.7.3
OR
apachecxfMatch2.7.4
OR
apachecxfMatch2.7.5
OR
apachecxfMatch2.7.6
OR
apachecxfMatch2.7.7
OR
apachecxfMatch2.7.8
OR
apachecxfMatch2.7.9
OR
apachecxfMatch2.7.10

References

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

6.4

Confidence

High

EPSS

0.009

Percentile

82.4%