What is GHSA-m6g3-xq5q-4hg9?

GHSA-m6g3-xq5q-4hg9 is a security advisory published by GitHub Security Advisories with Medium severity. Improper Input Validation in Apache Karaf

Which CVE IDs does GHSA-m6g3-xq5q-4hg9 cover?

GHSA-m6g3-xq5q-4hg9 covers the following CVE IDs: CVE-2014-0219. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-m6g3-xq5q-4hg9?

GHSA-m6g3-xq5q-4hg9 has a CVSS v3 base score of 5.5, published by GitHub Security Advisories.

Which products are affected by GHSA-m6g3-xq5q-4hg9?

GHSA-m6g3-xq5q-4hg9 affects 1 product, including: maven/org.apache.karaf:apache-karaf:\u003c 4.0.10.

GHSA-m6g3-xq5q-4hg9MediumCVSS 5.5

Improper Input Validation in Apache Karaf

Vendor

GitHub Security Advisories

Published

May 14, 2022

Last Modified

January 27, 2023

🔗 CVE IDs covered (1)

CVE-2014-0219 →

📋 Description

Apache Karaf before 4.0.10 enables a shutdown port on the loopback interface, which allows local users to cause a denial of service (shutdown) by sending a shutdown command to all listening high ports.

🎯 Affected products1

maven/org.apache.karaf:apache-karaf:< 4.0.10

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2014-0219
https://bugzilla.redhat.com/show_bug.cgi?id=1095974
http://karaf.apache.org/security/cve-2014-0219.txt
https://github.com/advisories/GHSA-m6g3-xq5q-4hg9