CVE-2014-2537: High severity Sophos Unified Threat Management vulnerability
Published Mar 18, 2014
·Updated
Memory leak in the TCP stack in the kernel in Sophos UTM before 9.109 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors.
Affected Software
22 affected components
Sophos Unified Threat Management<=9.108
Sophos Unified Threat Management=8.3
Sophos Unified Threat Management=9.007
Sophos Unified Threat Management=9.107
Sophos Unified Threat Management=110
Sophos Unified Threat Management=120
Sophos Unified Threat Management=220
Sophos Unified Threat Management=320
Sophos Unified Threat Management=425
Sophos Unified Threat Management=525
Sophos Unified Threat Management=625
All of the following
Any of the following
Sophos Unified Threat Management<=9.108
Sophos Unified Threat Management=8.3
Sophos Unified Threat Management=9.007
Sophos Unified Threat Management=9.107
Any of the following
Sophos Unified Threat Management=110
Sophos Unified Threat Management=120
Sophos Unified Threat Management=220
Sophos Unified Threat Management=320
Sophos Unified Threat Management=425
Sophos Unified Threat Management=525
Sophos Unified Threat Management=625
Remediation
Patch Available
Event History
Mar 18, 2014
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Data Sourced
via NVD·05:04 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-2537?
CVE-2014-2537 has a high severity due to its potential to lead to a denial of service through memory consumption.
2
How do I fix CVE-2014-2537?
To fix CVE-2014-2537, upgrade Sophos UTM to version 9.109 or later.
3
What versions of Sophos UTM are affected by CVE-2014-2537?
CVE-2014-2537 affects Sophos UTM versions up to 9.108 and several specific versions including 8.3, 9.007, 9.107, and others.
4
What is the impact of CVE-2014-2537 on Sophos UTM?
The impact of CVE-2014-2537 is a potential denial of service due to a memory leak in the TCP stack.
5
Who can exploit CVE-2014-2537?
CVE-2014-2537 can be exploited by remote attackers to cause a denial of service.