Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2014-3971

Опубликовано: 25 дек. 2014
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 5

Описание

The CmdAuthenticate::_authenticateX509 function in db/commands/authentication_commands.cpp in mongod in MongoDB 2.6.x before 2.6.2 allows remote attackers to cause a denial of service (daemon crash) by attempting authentication with an invalid X.509 client certificate.

РелизСтатусПримечание
devel

not-affected

1:2.6.3-0ubuntu5
esm-infra-legacy/trusty

not-affected

1:2.4.9-1ubuntu2
lucid

not-affected

1:1.2.2-1ubuntu1.1
precise

not-affected

1:2.0.4-1ubuntu2.1
trusty

not-affected

1:2.4.9-1ubuntu2
trusty/esm

not-affected

1:2.4.9-1ubuntu2
upstream

released

2.6.2
utopic

not-affected

1:2.6.3-0ubuntu5

Показывать по

EPSS

Процентиль: 83%
0.01981
Низкий

5 Medium

CVSS2

Связанные уязвимости

nvd
около 11 лет назад

The CmdAuthenticate::_authenticateX509 function in db/commands/authentication_commands.cpp in mongod in MongoDB 2.6.x before 2.6.2 allows remote attackers to cause a denial of service (daemon crash) by attempting authentication with an invalid X.509 client certificate.

debian
около 11 лет назад

The CmdAuthenticate::_authenticateX509 function in db/commands/authent ...

github
больше 3 лет назад

The CmdAuthenticate::_authenticateX509 function in db/commands/authentication_commands.cpp in mongod in MongoDB 2.6.x before 2.6.2 allows remote attackers to cause a denial of service (daemon crash) by attempting authentication with an invalid X.509 client certificate.

EPSS

Процентиль: 83%
0.01981
Низкий

5 Medium

CVSS2