Описание
Apache Karaf before 4.0.10 enables a shutdown port on the loopback interface, which allows local users to cause a denial of service (shutdown) by sending a shutdown command to all listening high ports.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat BPM Suite 6 | karaf | Not affected | ||
| Red Hat JBoss BRMS 6 | karaf | Not affected | ||
| Red Hat JBoss Enterprise Web Server 1 | amq-6.1 | Affected | ||
| Red Hat JBoss Enterprise Web Server 1 | fuse-6.1 | Affected | ||
| Red Hat JBoss Fuse Service Works 6 | karaf | Not affected |
Показывать по
10
Дополнительная информация
Статус:
Low
https://bugzilla.redhat.com/show_bug.cgi?id=1095974Karaf: denial of service via shutdown port
2.1 Low
CVSS2
Связанные уязвимости
CVSS3: 5.5
nvd
около 8 лет назад
Apache Karaf before 4.0.10 enables a shutdown port on the loopback interface, which allows local users to cause a denial of service (shutdown) by sending a shutdown command to all listening high ports.
CVSS3: 5.5
debian
около 8 лет назад
Apache Karaf before 4.0.10 enables a shutdown port on the loopback int ...
2.1 Low
CVSS2