CVE-2014-0086

Description

The doFilter function in webapp/PushHandlerFilter.java in JBoss RichFaces 4.3.4, 4.3.5, and 5.x allows remote attackers to cause a denial of service (memory consumption and out-of-memory error) via a large number of malformed atmosphere push requests.

Risk Information

Base Score

6.2

MODERATE

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C

EPSS Score

Exploitation Probability

0.64

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2014-0086 are fixed in RichFaces-richfaces 5.0.0	Windows
Vulnerabilities CVE-2014-0086 are affected in RichFaces-richfaces 4.3.5	Windows
Vulnerabilities CVE-2014-0086 are fixed in RichFaces-richfaces for Linux 5.0.0	Linux
Vulnerabilities CVE-2014-0086 are affected in RichFaces-richfaces for Linux 4.3.5	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234