Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
/www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095756 - http://rhn.redhat.com/errata/RHSA-2014-0680.html - http://www-01.ibm.com/support/docview.wss?uid=swg21676062 - http://secunia.com/advisories/59012 - http://secunia.com/advisories/58713 - http://www-01.ibm.com/support/docview.wss?uid=swg21673137 - http://secunia.com/advisories/59362 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:062 - http://www-01.ibm.com/support/docview.wss?uid=swg21676035 - http://marc.info/?l=bugtraq&m=140499864129699&w=2 - http://rhn.redhat.com/errata/RHSA-2014-0631.html - http://secunia.com/advisories/59338 - http://secunia.com/advisories/59450 - http://linux.oracle.com/errata/ELSA-20
tml - http://secunia.com/advisories/59338 - http://secunia.com/advisories/59450 - http://linux.oracle.com/errata/ELSA-2014-1053.html - http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html - http://www.kb.cert.org/vuls/id/978508 - http://www.securitytracker.com/id/1031032 - http://secunia.com/advisories/59287 - https://blogs.oracle.com/sunsecurity/entry/cve_2014_0224_cryptographic_issues1 - http://www-01.ibm.com/support/docview.wss?uid=swg21683332 - http://secunia.com/advisories/59491 - http://secunia.com/advisories/59364 - https://blogs.oracle.com/sunsecurity/entry/cve_2014_0224_cryptographic_issues - http://secunia.com/advisories/59451 - http://secunia.com/advisories/
security/entry/cve_2014_0224_cryptographic_issues - http://secunia.com/advisories/59451 - http://secunia.com/advisories/58977 - https://www.novell.com/support/kb/doc.php?id=7015271 - http://www-01.ibm.com/support/docview.wss?uid=swg21676333 - http://secunia.com/advisories/60571 - http://secunia.com/advisories/59459 - http://www-01.ibm.com/support/docview.wss?uid=swg21676833 - http://secunia.com/advisories/60577 - http://secunia.com/advisories/59448 - https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=bc8923b1ec9c467755cd86f7848c50ee8812e441 - https://www.intersectalliance.com/wp-content/uploads/release_notes/ReleaseNotes_for_Snare_for_Windows.pdf - http://www.blackberry.com/btsc/KB
alliance.com/wp-content/uploads/release_notes/ReleaseNotes_for_Snare_for_Windows.pdf - http://www.blackberry.com/btsc/KB36051 - http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095755 - http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-345106.htm - http://marc.info/?l=bugtraq&m=141164638606214&w=2 - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004690 - http://secunia.com/advisories/59885 - http://www-01.ibm.com/support/docview.wss?uid=swg21677527 - http://secunia.com/advisories/59202 - http://rhn.redhat.com/errata/RHSA-2014-0633.html - http://www.ibm.com/support/docview.wss?uid=ssg1S1004678 - http://secunia.com/advisories/59375 - htt
HSA-2014-0633.html - http://www.ibm.com/support/docview.wss?uid=ssg1S1004678 - http://secunia.com/advisories/59375 - http://marc.info/?l=bugtraq&m=140983229106599&w=2 - http://secunia.com/advisories/59528 - http://secunia.com/advisories/58337 - http://secunia.com/advisories/59518 - http://secunia.com/advisories/59389 - http://secunia.com/advisories/59162 - http://secunia.com/advisories/59383 - http://www-01.ibm.com/support/docview.wss?uid=swg21677567 - http://kb.juniper.net/InfoCenter/index?page=content&id=KB29217 - http://secunia.com/advisories/59490 - http://secunia.com/advisories/59916 - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=6060&myns=phmc&mync=E - htt
dvisories/59916 - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=6060&myns=phmc&mync=E - http://marc.info/?l=bugtraq&m=140491231331543&w=2 - http://www-01.ibm.com/support/docview.wss?uid=swg24037727 - http://www.ibm.com/support/docview.wss?uid=swg1IT02314 - http://secunia.com/advisories/59043 - http://secunia.com/advisories/59347 - http://secunia.com/advisories/60049 - http://www-01.ibm.com/support/docview.wss?uid=swg21676615 - https://cert-portal.siemens.com/productcert/pdf/ssa-234763.pdf - https://www.arista.com/en/support/advisories-notices/security-advisories/941-security-advisory-0005
CVE ID: CVE-2014-0225 State: PUBLISHED Published: 2017-05-25T17:00:00 Last Updated: 2024-08-06T09:05:39.298Z Vendors: Pivotal Products: Spring Framework Problem Types: XXE Description: When processing user provided XML documents, the Spring Framework 4.0.0 to 4.0.4, 3.0.0 to 3.2.8, and possibly earlier unsupported versions did not disable by default the resolution of URI references in a DTD declaration. This enabled an XXE attack. Additional Analyst Notes: - CVE Program Container: References: - https://pivotal.io/security/cve-2014-0225
CVE ID: CVE-2014-0226 State: PUBLISHED Published: 2014-07-20T10:00:00 Last Updated: 2024-08-06T09:05:39.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote attackers to cause a denial of service (heap-based buffer overflow), or possibly obtain sensitive credential information or execute arbitrary code, via a crafted request that triggers improper scoreboard handling within the status_handler function in modules/generators/mod_status.c and the lua_ap_scoreboard_worker function in modules/lua/lua_request.c. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?
nction in modules/lua/lua_request.c. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=144493176821532&w=2 - http://advisories.mageia.org/MGASA-2014-0305.html - http://www.debian.org/security/2014/dsa-2989 - http://www.securityfocus.com/bid/68678 - http://marc.info/?l=bugtraq&m=144050155601375&w=2 - https://support.apple.com/HT204659 - http://httpd.apache.org/security/vulnerabilities_24.html - http://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x/CHANGES - http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/generators/mod_status.c - http://security.gentoo.org/glsa/glsa-201408-12.xml - https://security.gentoo.org/glsa/201504-03 - http://rhn
_status.c - http://security.gentoo.org/glsa/glsa-201408-12.xml - https://security.gentoo.org/glsa/201504-03 - http://rhn.redhat.com/errata/RHSA-2014-1020.html - http://secunia.com/advisories/60536 - http://seclists.org/fulldisclosure/2014/Jul/114 - http://marc.info/?l=bugtraq&m=143748090628601&w=2 - http://marc.info/?l=bugtraq&m=143403519711434&w=2 - http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html - http://zerodayinitiative.com/advisories/ZDI-14-236/ - http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/generators/mod_status.c?r1=1450998&r2=1610491&diff_format=h - https://bugzilla.redhat.com/show_bug.cgi?id=1120603 - https://h20564.www2.hpe.com/portal/site/hpsc/p
491&diff_format=h - https://bugzilla.redhat.com/show_bug.cgi?id=1120603 - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04832246 - http://rhn.redhat.com/errata/RHSA-2014-1021.html - http://marc.info/?l=bugtraq&m=144493176821532&w=2 - http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/lua/lua_request.c?r1=1588989&r2=1610491&diff_format=h - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html - http://www.mandriva.com/security/advisories?name=MDVSA-2014:142 - https://puppet.com/security/cve/cve-2014-0226 - http://rhn.redhat.com/errata/RHSA-2014-1019.html - http://advisories.mageia.org/MGASA-2014-0304.html - http://www.osvdb.org/109216 -
edhat.com/errata/RHSA-2014-1019.html - http://advisories.mageia.org/MGASA-2014-0304.html - http://www.osvdb.org/109216 - http://www.exploit-db.com/exploits/34133 - http://marc.info/?l=bugtraq&m=143403519711434&w=2 - http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/lua/lua_request.c - https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.ht
63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.a
org%3E - https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E - https://www.povonsec.com/apache-2-4-7-exploit/ - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/ra7f6aeb28661fbf826969526585f16856abc4615877875f9d3b35ef4%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E - https://list
he.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r83109088737656fa6307bd99ab40f8ff0269ae58d3f7272d7048494a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9821b0a32a1d0a1b4947abb6f3630053fcbb2ec905d9a32c2bd4d4ee%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be
%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2014-0227 State: PUBLISHED Published: 2015-02-16T00:00:00 Last Updated: 2024-08-06T09:05:39.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat 6.x before 6.0.42, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle attempts to continue reading data after an error has occurred, which allows remote attackers to conduct HTTP request smuggling attacks or cause a denial of service (resource consumption) by streaming data with malformed chunked transfer coding. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujul201
tional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - http://www.ubuntu.com/usn/USN-2654-1 - http://rhn.redhat.com/errata/RHSA-2015-0765.html - http://rhn.redhat.com/errata/RHSA-2015-0675.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:052 - http://marc.info/?l=bugtraq&m=143393515412274&w=2 - http://rhn.redhat.com/errata/RHSA-2015-0720.html - http://marc.info/?l=bugtraq&m=143393515412274&w=2 - http://www.securityfocus.com/bid/72717 - http://rhn.redhat.com/errata/RHSA-2015-0991.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:084 - http://www.debian.org/security/2016/dsa-353
991.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:084 - http://www.debian.org/security/2016/dsa-3530 - http://www.securitytracker.com/id/1032791 - http://tomcat.apache.org/security-7.html - http://rhn.redhat.com/errata/RHSA-2015-0983.html - http://marc.info/?l=bugtraq&m=143403519711434&w=2 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:053 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150282.html - http://tomcat.apache.org/security-8.html - https://bugzilla.redhat.com/show_bug.cgi?id=1109196 - https://source.jboss.org/changelog/JBossWeb?cs=2455 - http:
html - https://bugzilla.redhat.com/show_bug.cgi?id=1109196 - https://source.jboss.org/changelog/JBossWeb?cs=2455 - http://archives.neohapsis.com/archives/bugtraq/2015-02/0067.html - http://advisories.mageia.org/MGASA-2015-0081.html - http://tomcat.apache.org/security-6.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://www.ubuntu.com/usn/USN-2655-1 - http://svn.apache.org/viewvc?view=revision&revision=1600984 - http://marc.info/?l=bugtraq&m=143403519711434&w=2 - http://www.debian.org/security/2016/dsa-3447 - https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E - https://lists.ap
rg/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d
3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2014-0228 State: PUBLISHED Published: 2014-11-16T17:00:00 Last Updated: 2024-08-06T09:05:39.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Hive before 0.13.1, when in SQL standards based authorization mode, does not properly check the file permissions for (1) import and (2) export statements, which allows remote authenticated users to obtain sensitive information via a crafted URI. Additional Analyst Notes: - CVE Program Container: References: - http://mail-archives.apache.org/mod_mbox/hive-user/201406.mbox/%3CCABgNGzeN7E+9d=YV5yvnKA7wmSx1op_avtUjPcPtDaR6DLJM6g%40mail.gmail.com%3E - http://packetstormsecurity.com/files/127091/Apache-Hive-0.13.0-Authorizati
1op_avtUjPcPtDaR6DLJM6g%40mail.gmail.com%3E - http://packetstormsecurity.com/files/127091/Apache-Hive-0.13.0-Authorization-Failure.html - http://www.securityfocus.com/archive/1/532418/100/0/threaded
CVE ID: CVE-2014-0229 State: PUBLISHED Published: 2017-03-23T20:00:00 Last Updated: 2024-08-06T09:05:39.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Hadoop 0.23.x before 0.23.11 and 2.x before 2.4.1, as used in Cloudera CDH 5.0.x before 5.0.2, do not check authorization for the (1) refreshNamenodes, (2) deleteBlockPool, and (3) shutdownDatanode HDFS admin commands, which allows remote authenticated users to cause a denial of service (DataNodes shutdown) or perform unnecessary operations by issuing a command. Additional Analyst Notes: - CVE Program Container: References: - https://www.cloudera.com/documentation/other/security-bulletins/topics/csb_topic_1.html#concept
Container: References: - https://www.cloudera.com/documentation/other/security-bulletins/topics/csb_topic_1.html#concept_i1q_xvk_2r
CVE ID: CVE-2014-0230 State: PUBLISHED Published: 2015-06-07T23:00:00 Last Updated: 2024-08-06T09:05:39.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of an entire request body, which allows remote attackers to cause a denial of service (thread consumption) via a series of aborted upload attempts. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05054964 - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367
ite/hpsc/public/kb/docDisplay?docId=emr_na-c05054964 - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - http://www.ubuntu.com/usn/USN-2654-1 - http://rhn.redhat.com/errata/RHSA-2015-1622.html - http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html - https://issues.jboss.org/browse/JWS-220 - http://www.debian.org/security/2016/dsa-3530 - http://rhn.redhat.com/errata/RHSA-2016-0599.html - http://svn.apache.org/viewvc?view=revision&revision=1603779 - http://tomcat.apache.org/security-7.html - http://marc.info/?l=bugtraq&m=145974991225029&w=2 - http://openwall.com/lists/oss-security/2015/04/10/1 - http://tomcat.apache.org/security-8.html - http://
991225029&w=2 - http://openwall.com/lists/oss-security/2015/04/10/1 - http://tomcat.apache.org/security-8.html - http://rhn.redhat.com/errata/RHSA-2015-2661.html - http://rhn.redhat.com/errata/RHSA-2016-0596.html - http://tomcat.apache.org/security-6.html - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04851013 - http://rhn.redhat.com/errata/RHSA-2016-0595.html - https://access.redhat.com/errata/RHSA-2015:2659 - http://mail-archives.apache.org/mod_mbox/tomcat-announce/201505.mbox/%3C554949D1.8030904%40apache.org%3E - http://marc.info/?l=bugtraq&m=144498216801440&w=2 - http://rhn.redhat.com/errata/RHSA-2016-0598.html - https://access.redhat.com/errata/RHSA-20
traq&m=144498216801440&w=2 - http://rhn.redhat.com/errata/RHSA-2016-0598.html - https://access.redhat.com/errata/RHSA-2015:2660 - http://www.ubuntu.com/usn/USN-2655-1 - http://rhn.redhat.com/errata/RHSA-2015-1621.html - http://www.securityfocus.com/bid/74475 - https://issues.jboss.org/browse/JWS-219 - http://www.debian.org/security/2016/dsa-3447 - http://svn.apache.org/viewvc?view=revision&revision=1603775 - http://svn.apache.org/viewvc?view=revision&revision=1603770 - http://rhn.redhat.com/errata/RHSA-2016-0597.html - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html - https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%
tinoct2015-2511968.html - https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r9136f
90ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2014-0231 State: PUBLISHED Published: 2014-07-20T10:00:00 Last Updated: 2024-08-06T09:05:39.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mod_cgid module in the Apache HTTP Server before 2.4.10 does not have a timeout mechanism, which allows remote attackers to cause a denial of service (process hang) via a request to a CGI script that does not read from its stdin file descriptor. Additional Analyst Notes: - CVE Program Container: References: - http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/generators/mod_cgid.c - http://marc.info/?l=bugtraq&m=144493176821532&w=2 - http://advisories.mageia.org/MGASA-2014-0305.html - http://packetstormsecurity.com/fil
l=bugtraq&m=144493176821532&w=2 - http://advisories.mageia.org/MGASA-2014-0305.html - http://packetstormsecurity.com/files/130769/RSA-Digital-Certificate-Solution-XSS-Denial-Of-Service.html - http://www.debian.org/security/2014/dsa-2989 - http://marc.info/?l=bugtraq&m=144050155601375&w=2 - https://support.apple.com/HT204659 - http://httpd.apache.org/security/vulnerabilities_24.html - http://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x/CHANGES - http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/generators/mod_cgid.c?r1=1482522&r2=1535125&diff_format=h - https://security.gentoo.org/glsa/201504-03 - http://rhn.redhat.com/errata/RHSA-2014-1020.html - https://puppet.com/security/cve/c
ecurity.gentoo.org/glsa/201504-03 - http://rhn.redhat.com/errata/RHSA-2014-1020.html - https://puppet.com/security/cve/cve-2014-0231 - http://secunia.com/advisories/60536 - http://marc.info/?l=bugtraq&m=143748090628601&w=2 - http://marc.info/?l=bugtraq&m=143403519711434&w=2 - http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04832246 - http://rhn.redhat.com/errata/RHSA-2014-1021.html - http://marc.info/?l=bugtraq&m=144493176821532&w=2 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html - http://www.securityfocus.com/bid/68742 - http://www.mandriva.com/security/advi
ecurity-announce/2015/Apr/msg00001.html - http://www.securityfocus.com/bid/68742 - http://www.mandriva.com/security/advisories?name=MDVSA-2014:142 - http://rhn.redhat.com/errata/RHSA-2014-1019.html - http://advisories.mageia.org/MGASA-2014-0304.html - https://bugzilla.redhat.com/show_bug.cgi?id=1120596 - http://marc.info/?l=bugtraq&m=143403519711434&w=2 - http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/generators/mod_cgid.c?r1=1565711&r2=1610509&diff_format=h - https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs
d.apache.org%3E - https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re3d27b6250aa8548b