CVE-2014-7968 - Vulnerability Details - OpenCVE

VDSM allows remote attackers to cause a denial of service (connection blocking) by keeping an SSL connection open.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

This CVE is not in the KEV list.

The EPSS score is 0.00603.

Key SSVC decision points have not yet been added.

Vendors	Products
Redhat	Enterprise Linux Rhev Manager Virtual Desktop Service Manager

Configuration 1 [-]

cpe:2.3:a:redhat:virtual_desktop_service_manager:-:*:*:*:*:*:*:*

Package	CPE	Advisory	Released Date
RHEV 3.X Hypervisor and Agents for RHEL-6
vdsm-0:4.14.18-4.el6ev	cpe:/a:redhat:enterprise_linux:6::hypervisor	RHBA-2014:1946	2014-12-02T00:00:00Z
RHEV 3.X Hypervisor and Agents for RHEL-7
vdsm-0:4.14.18-4.el7ev	cpe:/o:redhat:enterprise_linux:7::hypervisor	RHBA-2014:1946	2014-12-02T00:00:00Z
RHEV Manager version 3.4
vdsm-0:4.14.18-4.el6ev	cpe:/a:redhat:rhev_manager:3	RHBA-2014:1946	2014-12-02T00:00:00Z

No data.

Advisories

Source	ID	Title
EUVD	EUVD-2014-7817	VDSM allows remote attackers to cause a denial of service (connection blocking) by keeping an SSL connection open.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
http://www.openwall.com/lists/oss-security/2014/10/08/16
http://www.openwall.com/lists/oss-security/2014/10/08/18
http://www.openwall.com/lists/oss-security/2014/10/08/6
https://bugzilla.redhat.com/show_bug.cgi?id=1150812
https://nvd.nist.gov/vuln/detail/CVE-2014-7968
https://www.cve.org/CVERecord?id=CVE-2014-7968

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2014-10-22T14:00:00

Updated: 2024-08-06T13:03:27.578Z

Reserved: 2014-10-08T00:00:00

Link: CVE-2014-7968

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2014-10-22T14:55:07.013

Modified: 2025-04-12T10:46:40.837

Link: CVE-2014-7968

Redhat

Severity : Moderate

Publid Date: 2014-10-02T00:00:00Z

Links: CVE-2014-7968 - Bugzilla

OpenCVE Enrichment

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2014-10-08T00:00:00", "descriptions": [{"lang": "en", "value": "VDSM allows remote attackers to cause a denial of service (connection blocking) by keeping an SSL connection open."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2014-10-22T12:57:00", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "[oss-security] 20141008 Re: CVE request for VDSM denial of service", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://www.openwall.com/lists/oss-security/2014/10/08/16"}, {"name": "[oss-security] 20141008 Re: CVE request for VDSM denial of service", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://www.openwall.com/lists/oss-security/2014/10/08/18"}, {"name": "[oss-security] 20141008 CVE request for VDSM denial of service", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://www.openwall.com/lists/oss-security/2014/10/08/6"}, {"tags": ["x_refsource_MISC"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1150812"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2014-7968", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "VDSM allows remote attackers to cause a denial of service (connection blocking) by keeping an SSL connection open."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "[oss-security] 20141008 Re: CVE request for VDSM denial of service", "refsource": "MLIST", "url": "http://www.openwall.com/lists/oss-security/2014/10/08/16"}, {"name": "[oss-security] 20141008 Re: CVE request for VDSM denial of service", "refsource": "MLIST", "url": "http://www.openwall.com/lists/oss-security/2014/10/08/18"}, {"name": "[oss-security] 20141008 CVE request for VDSM denial of service", "refsource": "MLIST", "url": "http://www.openwall.com/lists/oss-security/2014/10/08/6"}, {"name": "https://bugzilla.redhat.com/show_bug.cgi?id=1150812", "refsource": "MISC", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1150812"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T13:03:27.578Z"}, "title": "CVE Program Container", "references": [{"name": "[oss-security] 20141008 Re: CVE request for VDSM denial of service", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2014/10/08/16"}, {"name": "[oss-security] 20141008 Re: CVE request for VDSM denial of service", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2014/10/08/18"}, {"name": "[oss-security] 20141008 CVE request for VDSM denial of service", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2014/10/08/6"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1150812"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2014-7968", "datePublished": "2014-10-22T14:00:00", "dateReserved": "2014-10-08T00:00:00", "dateUpdated": "2024-08-06T13:03:27.578Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:redhat:virtual_desktop_service_manager:-:*:*:*:*:*:*:*", "matchCriteriaId": "3DE9FF06-B1DD-46AF-B0A9-3D61CD51C8B7", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "VDSM allows remote attackers to cause a denial of service (connection blocking) by keeping an SSL connection open."}, {"lang": "es", "value": "VDSM permite a atacantes remotos causar una denegaci\u00f3n de servicio (bloqueo de conexi\u00f3n) mediante el mantener abierta una conexi\u00f3n SSL."}], "id": "CVE-2014-7968", "lastModified": "2025-04-12T10:46:40.837", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2014-10-22T14:55:07.013", "references": [{"source": "cve@mitre.org", "url": "http://www.openwall.com/lists/oss-security/2014/10/08/16"}, {"source": "cve@mitre.org", "url": "http://www.openwall.com/lists/oss-security/2014/10/08/18"}, {"source": "cve@mitre.org", "url": "http://www.openwall.com/lists/oss-security/2014/10/08/6"}, {"source": "cve@mitre.org", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1150812"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.openwall.com/lists/oss-security/2014/10/08/16"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.openwall.com/lists/oss-security/2014/10/08/18"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.openwall.com/lists/oss-security/2014/10/08/6"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1150812"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-310"}], "source": "nvd@nist.gov", "type": "Primary"}]}