Vulnerability in Cybozu Remote Service Manager

CVE-2014-7266

Algorithmic complexity vulnerability in Cybozu Remote Service Manager through 2.3.0 and 3.x through 3.1.2 allows remote attackers to cause a denial of service (CPU consumption) via vectors that trigger colliding hash-table keys. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1983.

EPSS: 0.018 (76.2th percentile) — read the EPSS interpretation.

Affected products

Cybozu Remote_service_manager — versions 2.3.0, 3.1.0, 3.1.1
N/a — versions n/a

Weakness classification (CWE)

CWE-399

References

vultures@jpcert.or.jp (x_refsource_CONFIRM, Patch, Vendor Advisory)
vultures@jpcert.or.jp (x_refsource_JVN, Vendor Advisory, third-party-advisory)
vultures@jpcert.or.jp (x_refsource_JVNDB, Vendor Advisory, third-party-advisory)