PT-2014-3481 · Apache · Apache Cxf

Publicado

2014-05-08

·

Atualizado

2022-05-13

·

CVE-2014-0110

CVSS v2.0

4.3

Média

VetorAV:N/AC:M/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions Apache CXF versions prior to 2.6.14 Apache CXF versions 2.7.x prior to 2.7.11
Description The issue allows remote attackers to cause a denial of service, specifically /tmp disk consumption, by sending a large invalid SOAP message.
Recommendations For Apache CXF versions prior to 2.6.14, update to version 2.6.14 or later. For Apache CXF versions 2.7.x prior to 2.7.11, update to version 2.7.11 or later.

Correção

Resource Exhaustion

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-399CWE-400

Identificadores relacionados

CVE-2014-0110
GHSA-5XF9-3V63-WW6F
RHSA-2014:0798
RHSA-2014:0799

Produtos afetados

Apache Cxf