CVE-2014-0110

CXF: Large invalid content could cause temporary space to fill

Published May 8, 2014 CVSS 2.0 · 4.3 Medium EPSS 3.6% KEV · Not listed
Description
Apache CXF before 2.6.14 and 2.7.x before 2.7.11 allows remote attackers to cause a denial of service (/tmp disk consumption) via a large invalid SOAP message.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2022-2677 Apache CXF before 2.6.14 and 2.7.x before 2.7.11 allows remote attackers to cause a denial of service (/tmp disk consumption) via a large invalid SOAP message.
Github GHSA Github GHSA GHSA-5xf9-3v63-ww6f Uncontrolled Resource Consumption in Apache CXF
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 6, 2024, 9:05 AM
Reserved
Dec 3, 2013, 12:00 AM
Status
Modified
Published
May 8, 2014, 2:29 PM
Modified
Jun 17, 2026, 12:02 AM
Severity
Moderate
Public date
May 1, 2014, 12:00 AM