CVE-2014-1988: Low severity Cybozu Garoon vulnerability
Published May 2, 2014
·Updated
The Phone Messages feature in Cybozu Garoon 2.0.0 through 3.7 SP2 allows remote authenticated users to cause a denial of service (resource consumption) via unspecified vectors.
Affected Software
29 affected components
Cybozu Garoon=2.0.0
Cybozu Garoon=2.1.0
Cybozu Garoon=2.1.1
Cybozu Garoon=2.1.2
Cybozu Garoon=2.1.3
Cybozu Garoon=2.5.0
Cybozu Garoon=2.5.1
Cybozu Garoon=2.5.2
Cybozu Garoon=2.5.3
Cybozu Garoon=2.5.4
Cybozu Garoon=3.0.0
Cybozu Garoon=3.0.1
Cybozu Garoon=3.0.2
Cybozu Garoon=3.0.3
Cybozu Garoon=3.1.0
Cybozu Garoon=3.1.1
Cybozu Garoon=3.1.2
Cybozu Garoon=3.1.3
Cybozu Garoon=3.5.0
Cybozu Garoon=3.5.1
Cybozu Garoon=3.5.2
Cybozu Garoon=3.5.3
Cybozu Garoon=3.5.4
Cybozu Garoon=3.5.5
Cybozu Garoon=3.7-sp1
Cybozu Garoon=3.7-sp2
Cybozu Garoon=3.7.0
Cybozu Garoon=3.7.1
Cybozu Garoon=3.7.2
Event History
May 2, 2014
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Data Sourced
via NVD·10:55 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-1988?
CVE-2014-1988 is classified as a denial of service vulnerability.
2
How do I fix CVE-2014-1988?
To fix CVE-2014-1988, update Cybozu Garoon to a version that is not affected, such as versions after 3.7 SP2.
3
Which versions of Cybozu Garoon are affected by CVE-2014-1988?
Affected versions include Cybozu Garoon 2.0.0 through 3.7 SP2.
4
Can CVE-2014-1988 be exploited by unprivileged users?
No, CVE-2014-1988 requires remote authenticated users to exploit the vulnerability.
5
What type of issue does CVE-2014-1988 cause in Cybozu Garoon?
CVE-2014-1988 causes resource consumption leading to a denial of service.