CVE-2014-0219

low-risk

Published 2017-11-15

Apache Karaf before 4.0.10 enables a shutdown port on the loopback interface, which allows local users to cause a denial of service (shutdown) by sending a shutdown command to all listening high ports.

Do I need to act?

0.08% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 5.5/10 Medium

LOCAL / LOW complexity

Affected Products (1)

Karaf

Affected Vendors

Apache

References (6)

Vendor Advisory http://karaf.apache.org/security/cve-2014-0219.txt

Third Party Advisory http://www.securityfocus.com/bid/101872

Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=1095974

Vendor Advisory http://karaf.apache.org/security/cve-2014-0219.txt

Third Party Advisory http://www.securityfocus.com/bid/101872

Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=1095974

/ 100

low-risk

Severity 18/34 · Moderate

Exploitability 0/34 · Minimal

Exposure 5/34 · Minimal