GitHub Advisoryadvisory · Maven

GHSA-5xf9-3v63-ww6f Uncontrolled Resource Consumption in Apache CXF

MEDIUM Published 2022-05-13 Modified 2023-12-21 Official page ↗
Aliases
CVE-2014-0110
Ecosystem
Maven
Packages
org.apache.cxf:cxf-core
Severity
Moderate
Weaknesses
CWE-400
Reviewed
2022-07-07

Affected packages

• Maven org.apache.cxf:cxf-core: < 2.6.14 → fixed in 2.6.14 • Maven org.apache.cxf:cxf-core: >= 2.7.0, < 2.7.11 → fixed in 2.7.11

Description

Apache CXF before 2.6.14 and 2.7.x before 2.7.11 allows remote attackers to cause a denial of service (/tmp disk consumption) via a large invalid SOAP message.

Related

Alias · CVE (1)

  • CVE-2014-0110 Apache CXF before 2.6.14 and 2.7.x before 2.7.11 allows remote attackers to cause a denial of service (/tmp disk consumption) via a large… vulnerability

Weakness · CWE (1)

  • CWE-400 Uncontrolled Resource Consumption weakness

References