CVE-2014-8119: Input Validation
A flaw was found in the way the netcf's findifcfgpath() function processed certain XPath expressions. An attacker able to supply a specially crafted XML file to an application using netcf could cause that application to crash.
Acknowledgements:
This issue was discovered by Hao Liu of Red Hat.
Other sources
The findifcfgpath function in netcf before 0.2.7 might allow attackers to cause a denial of service (application crash) via vectors involving augeas path expressions.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-8119?
CVE-2014-8119 has been classified as a moderate severity vulnerability due to its potential to cause application crashes.
How do I fix CVE-2014-8119?
To fix CVE-2014-8119, update the netcf package to version 0.2.7 or later.
Which systems are affected by CVE-2014-8119?
CVE-2014-8119 affects netcf versions up to 0.2.6, specifically on Fedora 20-22 and Red Hat Enterprise Linux 6.0 and 7.0.
What type of vulnerability is CVE-2014-8119?
CVE-2014-8119 is a flaw in the netcf's find_ifcfg_path() function that can cause a denial of service.
Who discovered CVE-2014-8119?
CVE-2014-8119 was discovered by Hao Liu of Red Hat.