Uncontrolled Resource Consumption in Apache CXF

MEDIO 4.3CVE-2014-0110 · GHSA-5xf9-3v63-ww6f · Published 08/05/2014 · updated 17/06/2026

En resumen

CVE-2014-0110 es una vulnerabilidad MEDIO (CVSS 4.3) que afecta a org.apache.cxf:cxf-core, cxf (apache).
Probabilidad de explotación en los próximos 30 días (EPSS): 3.6%, mayor que el 89.6% de las vulnerabilidades.
Solución: actualizar a 2.7.11, 2.6.14 o posterior.

Package	Affected versions	Patched versions
org.apache.cxf:cxf-core Maven	`≥ 2.7.0, < 2.7.11< 2.6.14`	`2.7.112.6.14`
cxf apache	`= 2.4.0= 2.4.1= 2.4.2= 2.4.3= 2.4.4= 2.4.5= 2.4.6= 2.4.7= 2.5.0= 2.5.1= 2.5.2= 2.5.3= 2.5.4= 2.5.5= 2.5.6= 2.5.7= 2.5.8= 2.5.9= 2.6.0= 2.6.1= 2.6.10= 2.6.11= 2.6.12= 2.6.2= 2.6.3= 2.6.4= 2.6.5= 2.6.6= 2.6.7= 2.6.8= 2.6.9= 2.7.0= 2.7.1= 2.7.10= 2.7.2= 2.7.3= 2.7.4= 2.7.5= 2.7.6= 2.7.7= 2.7.8= 2.7.9≤ 2.6.13`	No fix yet

Description

Apache CXF before 2.6.14 and 2.7.x before 2.7.11 allows remote attackers to cause a denial of service (/tmp disk consumption) via a large invalid SOAP message.

NVD description

Apache CXF before 2.6.14 and 2.7.x before 2.7.11 allows remote attackers to cause a denial of service (/tmp disk consumption) via a large invalid SOAP message.

References

Más vulnerabilidades de org.apache.cxf:cxf-core

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free