CVE-2014-6271 check directive