PT-2014-4769 · Sophos · Sophos Utm

Publicado 2014-03-18 · Atualizado 2014-04-01 · CVE-2014-2537

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Sophos UTM versions prior to 9.109

Description A memory leak in the TCP stack in the kernel allows remote attackers to cause a denial of service via unspecified vectors, resulting in memory consumption.

Recommendations For versions prior to 9.109, update to version 9.109 or later to resolve the issue.

Correção

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2014-2537

Produtos afetados

Sophos Utm

Referências · 6

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2537 · Nota
• http://securityfocus.com/bid/66231 · Nota
• http://secunia.com/advisories/57344 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2014-2537 · Nota de Segurança
• http://blogs.sophos.com/2014/02/20/utm-up2date-9-109 · Aviso do Fabricante
• http://securitytracker.com/id/1029920 · Nota