PT-2014-4769 · Sophos · Sophos Utm

Published 2014-03-18 · Updated 2014-04-01 · CVE-2014-2537

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Sophos UTM versions prior to 9.109

Description A memory leak in the TCP stack in the kernel allows remote attackers to cause a denial of service via unspecified vectors, resulting in memory consumption.

Recommendations For versions prior to 9.109, update to version 9.109 or later to resolve the issue.

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2014-2537

Affected Products

Sophos Utm

References · 6

• http://secunia.com/advisories/57344 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-2537 · Security Note
• http://blogs.sophos.com/2014/02/20/utm-up2date-9-109 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2537 · Note
• http://securityfocus.com/bid/66231 · Note
• http://securitytracker.com/id/1029920 · Note