CVE-2014-6258: Medium severity zenoss vulnerability
Published Dec 15, 2014
·Updated
An unspecified endpoint in Zenoss Core through 5 Beta 3 allows remote attackers to cause a denial of service (CPU consumption) by triggering an arbitrary regular-expression match attempt, aka ZEN-15411.
Affected Software
20 affected components
Zenoss Zenoss Core<=5.0.0
Zenoss Zenoss Core=2.4.0
Zenoss Zenoss Core=2.4.5
Zenoss Zenoss Core=2.5.0
Zenoss Zenoss Core=2.5.1
Zenoss Zenoss Core=2.5.2
Zenoss Zenoss Core=3.0.0
Zenoss Zenoss Core=3.0.1
Zenoss Zenoss Core=3.0.2
Zenoss Zenoss Core=3.0.3
Zenoss Zenoss Core=3.1.0
Zenoss Zenoss Core=3.2.0
Zenoss Zenoss Core=3.2.1
Zenoss Zenoss Core=4.2.0
Zenoss Zenoss Core=4.2.3
Zenoss Zenoss Core=4.2.4
Zenoss Zenoss Core=4.2.5
Zenoss Zenoss Core=5.0.0
Zenoss Zenoss Core=5.0.0-beta_1
Zenoss Zenoss Core=5.0.0-beta_2
Event History
Dec 15, 2014
CVE Published
via MITRE·05:27 PM
Data Sourced
via MITRE·05:27 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-6258?
The CVE-2014-6258 vulnerability has a medium severity level due to its potential for causing denial of service.
2
How do I fix CVE-2014-6258?
To address CVE-2014-6258, upgrade to a patched version of Zenoss Core that resolves the vulnerability.
3
Which versions are affected by CVE-2014-6258?
CVE-2014-6258 affects multiple versions of Zenoss Core, including versions 2.4.0 through 5.0.0.
4
What type of attack is associated with CVE-2014-6258?
CVE-2014-6258 is associated with denial of service attacks that lead to high CPU consumption.
5
Is there a workaround for CVE-2014-6258?
While upgrading is the preferred solution for CVE-2014-6258, limiting access to the affected endpoints can serve as a temporary workaround.