Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2014-0625
HistoryFeb 18, 2014 - 12:55 a.m.

CVE-2014-0625

2014-02-1800:55:05
CWE-399
[email protected]
web.nvd.nist.gov

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.6 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.3%

JSON

The SSLSocket implementation in the (1) JSAFE and (2) JSSE APIs in EMC RSA BSAFE SSL-J 5.x before 5.1.3 and 6.x before 6.0.2 allows remote attackers to cause a denial of service (memory consumption) by triggering application-data processing during the TLS handshake, a time at which the data is internally buffered.

Affected configurations

NVD
Node
dellbsafe_ssl-jMatch5.1.2
OR
dellbsafe_ssl-jMatch6.0
OR
emcrsa_bsafe_ssl-jMatch5.0
OR
emcrsa_bsafe_ssl-jMatch5.1.0
OR
emcrsa_bsafe_ssl-jMatch5.1.1
OR
emcrsa_bsafe_ssl-jMatch6.0.1

Related

cve 1
prion 1
cvelist 1
securityvulns 2
cve
cve
CVE-2014-0625
2014-02-18 00:55:05
prion
prion
Code injection
2014-02-18 00:55:00
cvelist
cvelist
CVE-2014-0625
2014-02-18 00:00:00
securityvulns
securityvulns
ESA-2014-009: RSA BSAFE® SSL-J Multiple Vulnerabilities
2014-04-07 00:00:00
RSA BSAFE multiple security vulnerabilities
2014-04-07 00:00:00

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.6 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.3%

JSON
Related for NVD:CVE-2014-0625
cve1prion1cvelist1securityvulns2