PT-2017-6151 · Netcf+3 · Netcf+3

Published 2015-06-24 · Updated 2019-04-22 · CVE-2014-8119

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: netcf versions prior to 0.2.7

Description: The issue concerns the find ifcfg path function in netcf, which might allow attackers to cause a denial of service, resulting in an application crash. This can be achieved via vectors involving augeas path expressions.

Recommendations: For versions prior to 0.2.7, update to version 0.2.7 or later to resolve the issue.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CESA-2015_2248

CVE-2014-8119

RHSA-2015:2248

RHSA-2015_2248

SUSE-SU-2015:1249-1

SUSE-SU-2015:1792-1

SUSE-SU-2015_1249-1

SUSE-SU-2015_1792-1

SUSE-SU-2018:0653-1

SUSE-SU-2018_0653-1

Affected Products

Centos

Red Hat

Suse

Netcf

References · 34

• http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157508.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2015:1249-1 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157713.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-8119 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8119 · Security Note
• https://linux.oracle.com/errata/ELSA-2015-2248.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2018:0653-1 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156571.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2015:1792-1 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2015-2248.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2018-00104 · Security Note
• https://rhn.redhat.com/errata/RHSA-2015-2248.html · Note
• https://lists.suse.com/pipermail/sle-security-updates/2015-July/001494.html · Note
• https://suse.com/security/cve/CVE-2014-8119.html · Note
• https://suse.com/support/update/announcement/2015/suse-su-20151249-1 · Note