« Volver al listado

CVE-2014-3742

Estado: ModificadaMedia (5)—

The hapi server framework 2.0.x and 2.1.x before 2.2.0 for Node.js allows remote attackers to cause a denial of service (file descriptor consumption and process crash) via unspecified vectors.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Spumko Project — Hapi Server Framework

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2014-3742",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-05-16T15:55:05.520",
  "references": [
    {
      "url": "http://www.openwall.com/lists/oss-security/2014/05/13/1",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2014/05/15/2",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://github.com/spumko/hapi/issues/1427",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://nodesecurity.io/advisories/hapi_File_descriptor_leak_DoS_vulnerability",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2014/05/13/1",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2014/05/15/2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://github.com/spumko/hapi/issues/1427",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://nodesecurity.io/advisories/hapi_File_descriptor_leak_DoS_vulnerability",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-399"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The hapi server framework 2.0.x and 2.1.x before 2.2.0 for Node.js allows remote attackers to cause a denial of service (file descriptor consumption and process crash) via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "El Framework de servidor hapi 2.0.x y 2.1.x anterior a 2.2.0 para Node.js permite a atacantes remotos causar una denegación de servicio (consumo de descriptor de archivos y caída de proceso) a través de vectores no especificados."
    }
  ],
  "lastModified": "2026-06-17T00:08:49.750",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:spumko_project:hapi_server_framework:2.0.0:-:*:*:*:node.js:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F86A1E74-9529-4DB3-974B-FD40E30938B2"
            },
            {
              "criteria": "cpe:2.3:a:spumko_project:hapi_server_framework:2.0.0:preview:*:*:*:node.js:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6C6326CD-E483-449F-AB73-A0A5F782E67F"
            },
            {
              "criteria": "cpe:2.3:a:spumko_project:hapi_server_framework:2.1.1:*:*:*:*:node.js:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AB4C9082-529E-4D1C-94FD-A7844FF384C5"
            },
            {
              "criteria": "cpe:2.3:a:spumko_project:hapi_server_framework:2.1.2:*:*:*:*:node.js:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F84A5D11-0740-4743-ABC9-D92C97C28007"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}