PT-2017-6112 · Red Hat · Red Hat Cloudforms

Published 2017-10-18 · Updated 2017-11-07 · CVE-2014-7813

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: Red Hat CloudForms version 3

Description: The issue allows remote authenticated users to cause a denial of service, specifically resource consumption, through vectors involving calls to the to sym rails function and a lack of garbage collection of inserted symbols.

Recommendations: For Red Hat CloudForms version 3, consider restricting access to the to sym rails function as a temporary workaround until a patch is available. Additionally, implementing proper garbage collection of inserted symbols may help mitigate the risk of resource consumption.

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2014-7813

Affected Products

Red Hat Cloudforms

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2014-7813 · Security Note
• https://bugzilla.redhat.com/show_bug.cgi?id=1157872 · Vendor Advisory