Apache CXF CVE-2014-0109 Remote Denial of Service Vulnerability

Bugtraq ID:	67236
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2014-0109
Remote:	Yes
Local:	No
Published:	May 06 2014 12:00AM
Updated:	May 07 2015 06:18PM
Credit:	Giancarlo Pellegrino and Davide Balzarotti
Vulnerable:
Not Vulnerable:

Apache CXF CVE-2014-0109 Remote Denial of Service Vulnerability

Apache CXF is prone to a remote denial-of-service vulnerability.

An attacker can exploit this issue to cause the affected application to crash, denying service to legitimate users.

Apache CXF prior to 2.6.14 and 2.7.11 are vulnerable.

Apache CXF CVE-2014-0109 Remote Denial of Service Vulnerability

Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Apache CXF CVE-2014-0109 Remote Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Apache CXF CVE-2014-0109 Remote Denial of Service Vulnerability

References:

• Apache CXF (Apache Software Foundation)