PT-2014-3480 · Apache · Apache Cxf
Publicado
2014-05-08
·
Atualizado
2022-05-13
·
CVE-2014-0109
CVSS v2.0
4.3
Média
| Vetor | AV:N/AC:M/Au:N/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
Apache CXF versions prior to 2.6.14
Apache CXF versions 2.7.x prior to 2.7.11
Description
The issue allows remote attackers to cause a denial of service, specifically memory consumption, by sending a large request with the Content-Type set to text/html to a SOAP endpoint. This triggers an error.
Recommendations
For Apache CXF versions prior to 2.6.14, update to version 2.6.14 or later.
For Apache CXF versions 2.7.x prior to 2.7.11, update to version 2.7.11 or later.
Correção
Resource Exhaustion
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Apache Cxf