CVE-2014-2537

Опубликовано: 18 мар. 2014

Источник: nvd

CVSS2: 7.8

EPSS Низкий

Описание

Memory leak in the TCP stack in the kernel in Sophos UTM before 9.109 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors.

Ссылки

http://blogs.sophos.com/2014/02/20/utm-up2date-9-109/
Patch
Vendor Advisory
http://secunia.com/advisories/57344
Vendor Advisory
http://www.securityfocus.com/bid/66231
http://www.securitytracker.com/id/1029920
http://blogs.sophos.com/2014/02/20/utm-up2date-9-109/
Patch
Vendor Advisory
http://secunia.com/advisories/57344
Vendor Advisory
http://www.securityfocus.com/bid/66231
http://www.securitytracker.com/id/1029920

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:sophos:unified_threat_management_software:*:*:*:*:*:*:*:*

Версия до 9.108 (включая)

cpe:2.3:a:sophos:unified_threat_management_software:8.3:*:*:*:*:*:*:*

cpe:2.3:a:sophos:unified_threat_management_software:9.007:*:*:*:*:*:*:*

cpe:2.3:a:sophos:unified_threat_management_software:9.107:*:*:*:*:*:*:*

Одно из

cpe:2.3:h:sophos:unified_threat_management:110:*:*:*:*:*:*:*

cpe:2.3:h:sophos:unified_threat_management:120:*:*:*:*:*:*:*

cpe:2.3:h:sophos:unified_threat_management:220:*:*:*:*:*:*:*

cpe:2.3:h:sophos:unified_threat_management:320:*:*:*:*:*:*:*

cpe:2.3:h:sophos:unified_threat_management:425:*:*:*:*:*:*:*

cpe:2.3:h:sophos:unified_threat_management:525:*:*:*:*:*:*:*

cpe:2.3:h:sophos:unified_threat_management:625:*:*:*:*:*:*:*

EPSS

Процентиль: 77%

0.01052

Низкий

7.8 High

CVSS2

Дефекты

CWE-399

Связанные уязвимости

GHSA-vvm2-f57h-2f5r

github

больше 3 лет назад