CVE-2014-9708: Null Pointer Dereference
Published Mar 31, 2015
·Updated
Embedthis Appweb before 4.6.6 and 5.x before 5.2.1 allows remote attackers to cause a denial of service (NULL pointer dereference) via a Range header with an empty value, as demonstrated by "Range: x=,".
Affected Software
433 affected components
Oracle Enterprise Communications Broker<=2.0.0
Embedthis Appweb<4.6.6
Embedthis Appweb>=5.0.0<5.2.1
Juniper Junos=12.1x46
Juniper Junos=12.1x46-d10
Juniper Junos=12.1x46-d15
Juniper Junos=12.1x46-d20
Juniper Junos=12.1x46-d25
Juniper Junos=12.1x46-d30
Juniper Junos=12.1x46-d35
Juniper Junos=12.1x46-d40
Juniper Junos=12.1x46-d45
Juniper Junos=12.1x46-d50
Juniper Junos=12.1x46-d55
Juniper Junos=12.1x46-d60
Juniper Junos=12.1x46-d65
Juniper Junos=12.1x46-d66
Juniper Junos=12.1x46-d67
Juniper Junos=12.1x46-d70
Juniper Junos=12.1x46-d71
Juniper Junos=12.1x46-d72
Juniper Junos=12.1x46-d73
Juniper Junos=12.1x46-d76
Juniper Junos=12.1x46-d77
Juniper Junos=12.3x48
Juniper Junos=12.3x48-d10
Juniper Junos=12.3x48-d15
Juniper Junos=12.3x48-d20
Juniper Junos=12.3x48-d25
Juniper Junos=12.3x48-d30
Juniper Junos=12.3x48-d35
Juniper Junos=12.3x48-d40
Juniper Junos=12.3x48-d45
Juniper Junos=12.3x48-d50
Juniper Junos=12.3x48-d51
Juniper Junos=12.3x48-d55
Juniper Junos=12.3x48-d60
Juniper Junos=12.3x48-d65
Juniper Junos=12.3x48-d66
Juniper Junos=12.3x48-d70
Juniper Junos=12.3x48-d75
Juniper Junos=15.1x49
Juniper Junos=15.1x49-d10
Juniper Junos=15.1x49-d100
Juniper Junos=15.1x49-d110
Juniper Junos=15.1x49-d120
Juniper Junos=15.1x49-d130
Juniper Junos=15.1x49-d131
Juniper Junos=15.1x49-d140
Juniper Junos=15.1x49-d15
Juniper Junos=15.1x49-d150
Juniper Junos=15.1x49-d160
Juniper Junos=15.1x49-d170
Juniper Junos=15.1x49-d20
Juniper Junos=15.1x49-d25
Juniper Junos=15.1x49-d30
Juniper Junos=15.1x49-d35
Juniper Junos=15.1x49-d40
Juniper Junos=15.1x49-d45
Juniper Junos=15.1x49-d50
Juniper Junos=15.1x49-d55
Juniper Junos=15.1x49-d60
Juniper Junos=15.1x49-d65
Juniper Junos=15.1x49-d70
Juniper Junos=15.1x49-d75
Juniper Junos=15.1x49-d80
Juniper Junos=15.1x49-d90
Juniper SRX100
Juniper SRX110
Juniper SRX1400
Juniper SRX1500
Juniper SRX210
Juniper SRX220
Juniper SRX240
Juniper Srx240h2
Juniper SRX240m
Juniper SRX300
Juniper SRX320
Juniper SRX340
Juniper SRX3400
Juniper SRX345
Juniper SRX3600
Juniper Srx380
Juniper SRX4000
Juniper SRX4100
Juniper SRX4200
Juniper SRX4600
Juniper SRX5000
Juniper SRX5400
Juniper SRX550
Juniper Srx550 Hm
Juniper SRX550m
Juniper SRX5600
Juniper SRX5800
Juniper SRX650
Juniper Junos=12.3
Juniper Junos=12.3-r1
Juniper Junos=12.3-r10
Juniper Junos=12.3-r10-s1
Juniper Junos=12.3-r10-s2
Juniper Junos=12.3-r11
Juniper Junos=12.3-r12
Juniper Junos=12.3-r12-s1
Juniper Junos=12.3-r12-s10
Juniper Junos=12.3-r12-s11
Juniper Junos=12.3-r12-s12
Juniper Junos=12.3-r12-s3
Juniper Junos=12.3-r12-s4
Juniper Junos=12.3-r12-s6
Juniper Junos=12.3-r12-s8
Juniper Junos=12.3-r13
Juniper Junos=12.3-r2
Juniper Junos=12.3-r3
Juniper Junos=12.3-r4
Juniper Junos=12.3-r5
Juniper Junos=12.3-r6
Juniper Junos=12.3-r7
Juniper Junos=12.3-r8
Juniper Junos=12.3-r9
Juniper EX2200
Juniper EX2200-C
Juniper Ex2200-vc
Juniper EX2300
Juniper Ex2300-24mp
Juniper Ex2300-24p
Juniper Ex2300-24t
Juniper Ex2300-48mp
Juniper Ex2300-48p
Juniper Ex2300-48t
Juniper EX2300-C
Juniper Ex2300m
Juniper EX3200
Juniper EX3300
Juniper Ex3300-vc
Juniper EX3400
Juniper EX4200
Juniper Ex4200-vc
Juniper EX4300
Juniper Ex4300-24p
Juniper Ex4300-24p-s
Juniper Ex4300-24t
Juniper Ex4300-24t-s
Juniper Ex4300-32f
Juniper Ex4300-32f-dc
Juniper Ex4300-32f-s
Juniper Ex4300-48mp
Juniper Ex4300-48mp-s
Juniper Ex4300-48p
Juniper Ex4300-48p-s
Juniper Ex4300-48t
Juniper Ex4300-48t-afi
Juniper Ex4300-48t-dc
Juniper Ex4300-48t-dc-afi
Juniper Ex4300-48t-s
Juniper Ex4300-48tafi
Juniper Ex4300-48tdc
Juniper Ex4300-48tdc-afi
Juniper EX4300-MP
Juniper Ex4300-vc
Juniper Ex4300m
Juniper EX4400
Juniper EX4500
Juniper Ex4500-vc
Juniper EX4550
Juniper Ex4550-vc
Juniper Ex4550\/vc
Juniper EX4600
Juniper Ex4600-vc
Juniper EX4650
Juniper EX6200
Juniper EX6210
Juniper EX8200
Juniper Ex8200-vc
Juniper EX8208
Juniper EX8216
Juniper EX9200
Juniper Ex9204
Juniper Ex9208
Juniper Ex9214
Juniper Ex9250
Juniper EX9251
Juniper Ex9253
Juniper Junos=15.1
Juniper Junos=15.1-a1
Juniper Junos=15.1-f
Juniper Junos=15.1-f1
Juniper Junos=15.1-f2
Juniper Junos=15.1-f2-s1
Juniper Junos=15.1-f2-s2
Juniper Junos=15.1-f2-s3
Juniper Junos=15.1-f2-s4
Juniper Junos=15.1-f3
Juniper Junos=15.1-f4
Juniper Junos=15.1-f5
Juniper Junos=15.1-f5-s7
Juniper Junos=15.1-f6
Juniper Junos=15.1-f6-s1
Juniper Junos=15.1-f6-s10
Juniper Junos=15.1-f6-s12
Juniper Junos=15.1-f6-s2
Juniper Junos=15.1-f6-s3
Juniper Junos=15.1-f6-s4
Juniper Junos=15.1-f6-s5
Juniper Junos=15.1-f6-s6
Juniper Junos=15.1-f6-s7
Juniper Junos=15.1-f6-s8
Juniper Junos=15.1-f6-s9
Juniper MX
Juniper MX10
Juniper Mx10000
Juniper MX10003
Juniper MX10008
Juniper MX10016
Juniper MX104
Juniper MX150
Juniper MX2008
Juniper MX2010
Juniper MX2020
Juniper MX204
Juniper MX240
Juniper Mx40
Juniper MX480
Juniper Mx5
Juniper Mx80
Juniper MX960
Juniper PTX1000
Juniper Ptx1000-72q
Juniper PTX10000
Juniper PTX10001
Juniper PTX10001-36MR
Juniper PTX100016
Juniper PTX10002
Juniper PTX10002-60C
Juniper PTX10003
Juniper Ptx10003 160c
Juniper Ptx10003 80c
Juniper Ptx10003 81cd
Juniper PTX10004
Juniper PTX10008
Juniper PTX10016
Juniper PTX3000
Juniper PTX5000
Juniper T1600
Juniper T320
Juniper T4000
Juniper T640
Juniper Junos=15.1x53
Juniper Junos=15.1x53
Juniper Junos=15.1x53-d10
Juniper Junos=15.1x53-d20
Juniper Junos=15.1x53-d21
Juniper Junos=15.1x53-d210
Juniper Junos=15.1x53-d230
Juniper Junos=15.1x53-d231
Juniper Junos=15.1x53-d232
Juniper Junos=15.1x53-d233
Juniper Junos=15.1x53-d234
Juniper Junos=15.1x53-d235
Juniper Junos=15.1x53-d236
Juniper Junos=15.1x53-d237
Juniper Junos=15.1x53-d25
Juniper Junos=15.1x53-d30
Juniper Junos=15.1x53-d31
Juniper Junos=15.1x53-d32
Juniper Junos=15.1x53-d33
Juniper Junos=15.1x53-d34
Juniper Junos=15.1x53-d40
Juniper Junos=15.1x53-d45
Juniper Junos=15.1x53-d47
Juniper Junos=15.1x53-d470
Juniper Junos=15.1x53-d471
Juniper Junos=15.1x53-d48
Juniper Junos=15.1x53-d490
Juniper Junos=15.1x53-d495
Juniper Junos=15.1x53-d50
Juniper Junos=15.1x53-d51
Juniper Junos=15.1x53-d52
Juniper Junos=15.1x53-d55
Juniper Junos=15.1x53-d56
Juniper Junos=15.1x53-d57
Juniper Junos=15.1x53-d58
Juniper Junos=15.1x53-d59
Juniper Junos=15.1x53-d590
Juniper Junos=15.1x53-d60
Juniper Junos=15.1x53-d61
Juniper Junos=15.1x53-d62
Juniper Junos=15.1x53-d63
Juniper Junos=15.1x53-d64
Juniper Junos=15.1x53-d65
Juniper Junos=15.1x53-d66
Juniper Junos=15.1x53-d67
Juniper Junos=15.1x53-d68
Juniper Junos=15.1x53-d70
Juniper QFX10000
Juniper Junos=15.1-f7
Juniper Junos=15.1-r
Juniper Junos=15.1-r1
Juniper Junos=15.1-r2
Juniper Junos=15.1-r3
Juniper Junos=15.1-r4
Juniper Junos=15.1-r4-s7
Juniper Junos=15.1-r4-s8
Juniper Junos=15.1-r4-s9
Juniper Junos=15.1-r5
Juniper Junos=15.1-r5-s1
Juniper Junos=15.1-r5-s3
Juniper Junos=15.1-r5-s5
Juniper Junos=15.1-r5-s6
Juniper Junos=15.1-r6
Juniper Junos=15.1-r6-s1
Juniper Junos=15.1-r6-s2
Juniper Junos=15.1-r6-s3
Juniper Junos=15.1-r6-s4
Juniper Junos=15.1-r6-s6
Juniper Junos=15.1-r7
Juniper Junos=15.1-r7-s1
Juniper Junos=15.1-r7-s10
Juniper Junos=15.1-r7-s11
Juniper Junos=15.1-r7-s12
Juniper Junos=15.1-r7-s2
Juniper Junos=15.1-r7-s3
Juniper Junos=16.1
Juniper Junos=16.1-r1
Juniper Junos=16.1-r2
Juniper Junos=16.1-r3
Juniper Junos=16.1-r3-s10
Juniper Junos=16.1-r3-s11
Juniper Junos=16.1-r3-s8
Juniper Junos=16.1-r4
Juniper Junos=16.1-r4-s12
Juniper Junos=16.1-r4-s2
Juniper Junos=16.1-r4-s3
Juniper Junos=16.1-r4-s4
Juniper Junos=16.1-r4-s6
Juniper Junos=16.1-r4-s8
Juniper Junos=16.1-r4-s9
Juniper Junos=16.1-r5
Juniper Junos=16.1-r5-s4
Juniper Junos=16.1-r6
Juniper Junos=16.1-r6-s1
Juniper Junos=16.1-r6-s3
Juniper Junos=16.1-r6-s4
Juniper Junos=16.1-r6-s6
Juniper Junos=16.1-r7
Juniper Junos=16.1-r7-s2
Juniper Junos=16.1-r7-s3
Juniper Junos=16.1-r7-s4
Juniper Junos=16.1-r7-s5
Juniper Junos=16.2
Juniper Junos=16.2-r1
Juniper Junos=16.2-r1-s6
Juniper Junos=16.2-r2
Juniper Junos=16.2-r2-s1
Juniper Junos=16.2-r2-s10
Juniper Junos=16.2-r2-s2
Juniper Junos=16.2-r2-s5
Juniper Junos=16.2-r2-s6
Juniper Junos=16.2-r2-s7
Juniper Junos=16.2-r2-s8
Juniper Junos=17.1
Juniper Junos=17.1-r1
Juniper Junos=17.1-r1-s7
Juniper Junos=17.1-r2
Juniper Junos=17.1-r2-s1
Juniper Junos=17.1-r2-s10
Juniper Junos=17.1-r2-s11
Juniper Junos=17.1-r2-s2
Juniper Junos=17.1-r2-s3
Juniper Junos=17.1-r2-s4
Juniper Junos=17.1-r2-s5
Juniper Junos=17.1-r2-s6
Juniper Junos=17.1-r2-s7
Juniper Junos=17.1-r2-s8
Juniper Junos=17.1-r2-s9
Juniper Junos=17.2-r2
Juniper Junos=17.2-r2-s4
Juniper Junos=17.2-r2-s6
Juniper Junos=17.2-r3
Juniper Junos=17.3
Juniper Junos=17.3-r1
Juniper Junos=17.3-r1-s1
Juniper Junos=17.3-r1-s4
Juniper Junos=17.3-r2
Juniper Junos=17.3-r2-s1
Juniper Junos=17.3-r2-s2
Juniper Junos=17.3-r2-s3
Juniper Junos=17.3-r2-s4
Juniper Junos=17.3-r3
Juniper Junos=17.3-r3-s1
Juniper Junos=17.3-r3-s2
Juniper Junos=17.3-r3-s3
Juniper Junos=17.3-r3-s4
Juniper Junos=17.4
Juniper Junos=17.4-r1
Juniper Junos=17.4-r1-s1
Juniper Junos=17.4-r1-s2
Juniper Junos=17.4-r1-s3
Juniper Junos=17.4-r1-s4
Juniper Junos=17.4-r1-s5
Juniper Junos=17.4-r1-s6
Juniper Junos=17.4-r2
Juniper Junos=17.4-r2-s1
Juniper Junos=17.4-r2-s2
Juniper Junos=17.4-r2-s3
Juniper Junos=17.4-r2-s4
Juniper Junos=17.4-r2-s5
Juniper Junos=18.1
Juniper Junos=18.1-r1
Juniper Junos=18.1-r2
Juniper Junos=18.1-r2-s1
Juniper Junos=18.1-r2-s2
Juniper Junos=18.1-r2-s4
Juniper Junos=18.1-r3
Juniper Junos=18.1-r3-s1
Juniper Junos=18.1-r3-s2
Juniper Junos=18.1-r3-s3
Juniper Junos=18.2
Juniper Junos=18.2-r1
Juniper Junos=18.2-r1
Juniper Junos=18.2-r1-s2
Juniper Junos=18.2-r1-s3
Juniper Junos=18.2-r1-s4
Juniper Junos=18.2-r2
Juniper Junos=18.2-r2-s1
Juniper Junos=18.2-r2-s2
Juniper Junos=18.3
Juniper Junos=18.3-r1
Juniper Junos=18.3-r1-s1
Juniper Junos=18.3-r1-s2
Juniper Junos=18.4
Juniper Junos=18.4-r1
Juniper Junos=18.4-r1-s1
Juniper Junos=18.4-r1-s2
Remediation
Patch Available
Patch Available
Event History
Mar 31, 2015
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-9708?
CVE-2014-9708 has a severity rating that indicates it allows remote attackers to cause a denial of service via a NULL pointer dereference.
2
How do I fix CVE-2014-9708?
To fix CVE-2014-9708, update your Embedthis Appweb to version 4.6.6 or later and version 5.2.1 or later.
3
What versions of Embedthis Appweb are affected by CVE-2014-9708?
CVE-2014-9708 affects Embedthis Appweb versions prior to 4.6.6 and 5.x versions prior to 5.2.1.
4
Can CVE-2014-9708 affect Juniper devices running JUNOS?
Yes, certain versions of Juniper JUNOS are also affected by CVE-2014-9708.
5
What actions can be taken to mitigate CVE-2014-9708?
Mitigation for CVE-2014-9708 includes updating to the recommended software versions and monitoring for potential denial of service attacks.