Vulnerability in Microsoft Service Bus
CVE-2014-2814
Microsoft Service Bus 1.1 on Microsoft Windows Server 2008 R2 SP1 and Server 2012 Gold and R2 allows remote authenticated users to cause a denial of service (AMQP messaging outage) via crafted AMQP messages, aka "Service Bus Denial of Service Vulnerability."
EPSS: 0.183 (96.9th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Service_bus — versions 1.1
- Microsoft Windows_server_2012 — versions r2
- N/a — versions n/a
Public proof-of-concept exploits
References
- secure@microsoft.com (x_refsource_SECUNIA, third-party-advisory)
- secure@microsoft.com (vdb-entry, x_refsource_BID)
- secure@microsoft.com (vdb-entry, x_refsource_SECTRACK)
- secure@microsoft.com (vendor-advisory, x_refsource_MSKB)
- secure@microsoft.com (x_refsource_MS, vendor-advisory)
Frequently asked questions
- What is CVE-2014-2814?
- CVE-2014-2814 is a vulnerability in Microsoft Service Bus. Published 2014-07-08.
- Is CVE-2014-2814 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.