GHSA-m6g3-xq5q-4hg9

ghsaUSosv

Improper Input Validation in Apache Karaf

view advisory published 2022-05-14Licence: CC-BY-4.0

Apache Karaf before 4.0.10 enables a shutdown port on the loopback interface, which allows local users to cause a denial of service (shutdown) by sending a shutdown command to all listening high ports.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2014-0219US	medium5.5	0.70% (53rd)	—	2017-11-15
Apache Karaf before 4.0.10 enables a shutdown port on the loopback interface, which allows local users to cause a denial of service (shutdown) by sending a shutdown command to all…

references

External citations — patches, advisories, analysis.

http://karaf.apache.org/security/cve-2014-0219.txtWEB
https://bugzilla.redhat.com/show_bug.cgi?id=1095974WEB
https://nvd.nist.gov/vuln/detail/CVE-2014-0219ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan