« Volver al listado

CVE-2014-2814

Estado: ModificadaMedia (4)—

Microsoft Service Bus 1.1 on Microsoft Windows Server 2008 R2 SP1 and Server 2012 Gold and R2 allows remote authenticated users to cause a denial of service (AMQP messaging outage) via crafted AMQP messages, aka "Service Bus Denial of Service Vulnerability."

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Microsoft — Service BUS

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2014-2814",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:P",
          "authentication": "SINGLE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "secure@microsoft.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-07-08T22:55:07.537",
  "references": [
    {
      "url": "http://secunia.com/advisories/59780",
      "source": "secure@microsoft.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/68393",
      "source": "secure@microsoft.com"
    },
    {
      "url": "http://www.securitytracker.com/id/1030538",
      "source": "secure@microsoft.com"
    },
    {
      "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-042",
      "source": "secure@microsoft.com"
    },
    {
      "url": "https://support.microsoft.com/kb/2972621",
      "source": "secure@microsoft.com"
    },
    {
      "url": "http://secunia.com/advisories/59780",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/68393",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id/1030538",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-042",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://support.microsoft.com/kb/2972621",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Microsoft Service Bus 1.1 on Microsoft Windows Server 2008 R2 SP1 and Server 2012 Gold and R2 allows remote authenticated users to cause a denial of service (AMQP messaging outage) via crafted AMQP messages, aka \"Service Bus Denial of Service Vulnerability.\""
    },
    {
      "lang": "es",
      "value": "Microsoft Service Bus 1.1 en Microsoft Windows Server 2008 R2 SP1 y Server 2012 Gold y R2 permite a usuarios remotos autenticados causar una denegación de servicio (interrupción de mensajes AMQP) a través de mensajes AMQP manipulados, también conocido como 'vulnerabilidad de denegación de servicio de Service Bus.'"
    }
  ],
  "lastModified": "2026-06-17T00:07:12.287",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:microsoft:service_bus:1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3382E3EE-6B37-4FEE-8EC4-F0E14531E67C"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:datacenter:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "32BCD530-F6E2-4F9B-AD4C-7DF2BED00296"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:essentials:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "A1318333-EF3A-4DBA-8DD7-367BF843F70D"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:standard:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "74B5E7C1-6C1D-4605-91CF-AF105EFA678D"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "secure@microsoft.com"
}