PT-2017-6151 · Netcf+3 · Netcf+3

Publicado 2015-06-24 · Atualizado 2019-04-22 · CVE-2014-8119

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: netcf versions prior to 0.2.7

Description: The issue concerns the find ifcfg path function in netcf, which might allow attackers to cause a denial of service, resulting in an application crash. This can be achieved via vectors involving augeas path expressions.

Recommendations: For versions prior to 0.2.7, update to version 0.2.7 or later to resolve the issue.

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CESA-2015_2248

CVE-2014-8119

RHSA-2015:2248

RHSA-2015_2248

SUSE-SU-2015:1249-1

SUSE-SU-2015:1792-1

SUSE-SU-2015_1249-1

SUSE-SU-2015_1792-1

SUSE-SU-2018:0653-1

SUSE-SU-2018_0653-1

Produtos afetados

Centos

Red Hat

Suse

Netcf

Referências · 34

• http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157508.html · Aviso do Fabricante
• https://osv.dev/vulnerability/SUSE-SU-2015:1249-1 · Aviso do Fabricante
• http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157713.html · Aviso do Fabricante
• https://rhn.redhat.com/errata/RHSA-2015-2248.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-8119 · Nota de Segurança
• https://lists.suse.com/pipermail/sle-security-updates/2015-July/001494.html · Nota
• https://suse.com/security/cve/CVE-2014-8119.html · Nota
• https://suse.com/support/update/announcement/2015/suse-su-20151249-1 · Nota
• https://lists.centos.org/pipermail/centos-cr-announce/2015-November/022078.html · Nota
• https://suse.com/security/cve/CVE-2017-7555.html · Nota
• https://lists.suse.com/pipermail/sle-security-updates/2018-March/003801.html · Nota
• https://lists.centos.org/pipermail/centos-cr-announce/2015-November/028768.html · Nota
• https://lists.centos.org/pipermail/centos-cr-announce/2015-November/015388.html · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8119 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2014-8119 · Nota