CVE-2014-3712

Katello allows remote attackers to cause a denial of service memory consumption via the 1 mode parameter in the setuputils function in contentsearchcontroller.rb or 2 action parameter in the respond function in api/apicontroller.rb in app/controllers/katello/, which is passed to the tosym method...

CVE-2014-3712

Katello vulnerability CVE-2014-3712 allows remote attackers to cause a denial of service via memory consumption. The issue arises in the Katello code paths performing to_sym on user-supplied values: (1) mode parameter in setup_utils (content_search_controller.rb) and (2) action parameter in respo...