Uncontrolled Resource Consumption in Apache CXF
Apache CXF before 2.6.14 and 2.7.x before 2.7.11 allows remote attackers to cause a denial of service (/tmp disk consumption) via a large invalid SOAP message.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2014-0110US | medium4.3 | — | ||
Apache CXF before 2.6.14 and 2.7.x before 2.7.11 allows remote attackers to cause a denial of service (/tmp disk consumption) via a large invalid SOAP message. | ||||
02
references
External citations — patches, advisories, analysis.
- http://cxf.apache.org/security-advisories.data/CVE-2014-0110.txt.ascWEB
- http://rhn.redhat.com/errata/RHSA-2014-1351.htmlWEB
- http://rhn.redhat.com/errata/RHSA-2015-0850.htmlWEB
- http://rhn.redhat.com/errata/RHSA-2015-0851.htmlWEB
- https://github.com/apache/cxfWEB
- https://github.com/apache/cxf/commit/35cd29270b77b489cb23552637d66d47ce480f4cWEB
- https://github.com/apache/cxf/commit/643b1bc7320ca90c3e078e50509f9a30a0ab45beWEB
- https://github.com/apache/cxf/commit/8f4799b5bc5ed0fe62d6e018c45d960e3652373eWEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan