CVE-2014-7204: Medium severity ubuntu vulnerability
Published Mar 25, 2014
·Updated
jscript.c in Exuberant Ctags 5.8 allows remote attackers to cause a denial of service (infinite loop and CPU and disk consumption) via a crafted JavaScript file.
Affected Software
8 affected componentsFixes available
debian/exuberant-ctags<=1:5.9~svn20110310-4, <=1:5.9~svn20110310-7
1:5.9~svn20110310-81:5.8-3squeeze21:5.9~svn20110310-4+deb7u1
debian/exuberant-ctags
1:5.9~svn20110310-14+deb11u11:5.9~svn20110310-181:5.9~svn20110310-19
Canonical Ubuntu Linux=12.04
Canonical Ubuntu Linux=14.04
Debian Debian Linux=7.0
Debian Exuberant Ctags=5.8
Mageia Mageia=3.0
Mageia Mageia=4.0
Remediation
Patch Available
Event History
Oct 7, 2014
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-7204?
CVE-2014-7204 has a medium severity level due to its potential to cause denial of service through an infinite loop.
2
How do I fix CVE-2014-7204?
To fix CVE-2014-7204, update Exuberant Ctags to version 5.9 or later.
3
Which versions of Exuberant Ctags are affected by CVE-2014-7204?
Exuberant Ctags versions 5.8 and below are affected by CVE-2014-7204.
4
Can CVE-2014-7204 impact Ubuntu or Debian systems?
Yes, CVE-2014-7204 can impact Ubuntu 12.04 and 14.04, as well as Debian 7.0 and earlier versions.
5
What kind of attack is associated with CVE-2014-7204?
CVE-2014-7204 allows for a denial of service attack by consuming CPU and disk resources.