Serf

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2014-3504 MEDIUM This Month

The (1) serf_ssl_cert_issuer, (2) serf_ssl_cert_subject, and (3) serf_ssl_cert_certificate functions in Serf 0.2.0 through 1.3.x before 1.3.7 does not properly handle a NUL byte in a domain name in. Rated medium severity (CVSS 4.0), this vulnerability is remotely exploitable. No vendor patch available.

Information Disclosure Subversion Ubuntu Linux Serf

NVD

CVSS 2.0

4.0

EPSS

2.1%

CVE-2014-3504

EPSS 2% CVSS 4.0

MEDIUM This Month

The (1) serf_ssl_cert_issuer, (2) serf_ssl_cert_subject, and (3) serf_ssl_cert_certificate functions in Serf 0.2.0 through 1.3.x before 1.3.7 does not properly handle a NUL byte in a domain name in. Rated medium severity (CVSS 4.0), this vulnerability is remotely exploitable. No vendor patch available.

Information Disclosure Subversion Ubuntu Linux +1

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy