What is the CVSS score of CVE-2014-1943?

CVE-2014-1943 has a CVSS 2.0 base score of 5.0 (Medium). CVSS vector: AV:N/AC:L/Au:N/C:N/I:N/A:P. EPSS exploitation probability: 21.5%.

Fine Free File CVE-2014-1943

MEDIUM

Improper Handling of Exceptional Conditions (CWE-755)

2014-02-18 cve@mitre.org

Denial Of Service Fine Free File PHP Ubuntu Linux Debian Linux

5.0

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

5.0 MEDIUM

AV:N/AC:L/Au:N/C:N/I:N/A:P

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:L/Au:N/C:N/I:N/A:P

Attack Vector

Network

Attack Complexity

Low

Confidentiality

None

Integrity

None

Availability

Lifecycle Timeline

CVE Published

Feb 18, 2014 - 19:55 cve.org

MEDIUM 5.0

DescriptionCVE.org

Fine Free file before 5.17 allows context-dependent attackers to cause a denial of service (infinite recursion, CPU consumption, and crash) via a crafted indirect offset value in the magic of a file.

AnalysisAI

Fine Free file before 5.17 allows context-dependent attackers to cause a denial of service (infinite recursion, CPU consumption, and crash) via a crafted indirect offset value in the magic of a file. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. Epss exploitation probability 21.5% and no vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-755. Fine Free file before 5.17 allows context-dependent attackers to cause a denial of service (infinite recursion, CPU consumption, and crash) via a crafted indirect offset value in the magic of a file. Affected products include: Fine Free File Project Fine Free File, Php, Canonical Ubuntu Linux, Debian Debian Linux. Version information: before 5.17.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.