« Volver al listado

CVE-2014-2852

Estado: ModificadaMedia (5)—

OpenAFS before 1.6.7 delays the listen thread when an RXS_CheckResponse fails, which allows remote attackers to cause a denial of service (performance degradation) via an invalid packet.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Openafs — Openafs

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2014-2852",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-04-14T15:09:06.443",
  "references": [
    {
      "url": "http://www.debian.org/security/2014/dsa-2899",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.openafs.org/frameset/dl/openafs/1.6.7/ChangeLog",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.debian.org/security/2014/dsa-2899",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.openafs.org/frameset/dl/openafs/1.6.7/ChangeLog",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "OpenAFS before 1.6.7 delays the listen thread when an RXS_CheckResponse fails, which allows remote attackers to cause a denial of service (performance degradation) via an invalid packet."
    },
    {
      "lang": "es",
      "value": "OpenAFS anterior a 1.6.7 retrasa el hilo de escucha cuando falla un RXS_CheckResponse, lo que permite a atacantes remotos causar una denegación de servicio (degradación de rendimiento) a través de un paquete invalido."
    }
  ],
  "lastModified": "2026-06-17T00:07:15.460",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:openafs:openafs:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "555DA1F4-5AE1-444C-B9F0-D19959AAC66D",
              "versionEndIncluding": "1.6.6"
            },
            {
              "criteria": "cpe:2.3:a:openafs:openafs:1.6.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A8A71A1B-DCDC-4E72-9C46-49919E4F372C"
            },
            {
              "criteria": "cpe:2.3:a:openafs:openafs:1.6.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7150CE0E-A1EC-41EB-AD71-5B6C87289EEB"
            },
            {
              "criteria": "cpe:2.3:a:openafs:openafs:1.6.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7EEFFEE0-C867-40F1-93F4-239EF1C6E2AF"
            },
            {
              "criteria": "cpe:2.3:a:openafs:openafs:1.6.2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BBD16CAA-1DF0-4BFC-AB76-AD06329080D1"
            },
            {
              "criteria": "cpe:2.3:a:openafs:openafs:1.6.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3AC2FFCF-BC84-43FF-8162-C796D3E43317"
            },
            {
              "criteria": "cpe:2.3:a:openafs:openafs:1.6.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "47FED822-5D5F-4299-9E17-865F9ADDCB09"
            },
            {
              "criteria": "cpe:2.3:a:openafs:openafs:1.6.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FED301E1-B19C-49D7-AF5D-20301BA53E60"
            },
            {
              "criteria": "cpe:2.3:a:openafs:openafs:1.6.5.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FA403EE6-31FB-47A3-BDBE-72A4277A4EC9"
            },
            {
              "criteria": "cpe:2.3:a:openafs:openafs:1.6.5.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "58385FBA-632C-49B4-8AD0-9B3585845955"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}