CVE-2014-7204 jscript.c in Exuberant Ctags 5.8 allows remote attackers to cause a denial of service (infinite loop and CPU and disk consumption) via a crafted JavaScript file.
MediumCVSS 5.0
EPSS 4.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
jscript.c in Exuberant Ctags 5.8 allows remote attackers to cause a denial of service (infinite loop and CPU and disk consumption) via a crafted JavaScript file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/exuberant-ctags(Debian:12) | < 1:5.9~svn20110310-8 | 1:5.9~svn20110310-8 |
| debian/exuberant-ctags(Debian:13) | < 1:5.9~svn20110310-8 | 1:5.9~svn20110310-8 |
| debian/exuberant-ctags(Debian:14) | < 1:5.9~svn20110310-8 | 1:5.9~svn20110310-8 |
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| debian linux | = 7.0 | No fix listed |
| debian exuberant ctags | = 5.8 | No fix listed |
| mageia | = 3.0 | No fix listed |
| mageia | = 4.0 | No fix listed |
| alpine/ctags(Alpine:v3.10) | < 5.8-r5 | 5.8-r5 |
| alpine/ctags(Alpine:v3.11) | < 5.8-r5 | 5.8-r5 |
| alpine/ctags(Alpine:v3.12) | < 5.8-r5 | 5.8-r5 |
| alpine/ctags(Alpine:v3.13) | < 5.8-r5 | 5.8-r5 |
| alpine/ctags(Alpine:v3.14) | < 5.8-r5 | 5.8-r5 |
| alpine/ctags(Alpine:v3.15) | < 5.8-r5 | 5.8-r5 |
| alpine/ctags(Alpine:v3.16) | < 5.8-r5 | 5.8-r5 |
| alpine/ctags(Alpine:v3.17) | < 5.8-r5 | 5.8-r5 |
| alpine/ctags(Alpine:v3.18) | < 5.8-r5 | 5.8-r5 |
| alpine/ctags(Alpine:v3.19) | < 5.8-r5 | 5.8-r5 |
| alpine/ctags(Alpine:v3.20) | < 5.8-r5 | 5.8-r5 |
| alpine/ctags(Alpine:v3.21) | < 5.8-r5 | 5.8-r5 |
| alpine/ctags(Alpine:v3.22) | < 5.8-r5 | 5.8-r5 |
| alpine/ctags(Alpine:v3.23) | < 5.8-r5 | 5.8-r5 |
| alpine/ctags(Alpine:v3.24) | < 5.8-r5 | 5.8-r5 |
| alpine/ctags(Alpine:v3.6) | < 5.8-r5 | 5.8-r5 |
Show 3 more
| Product | Affected versions | Fixed in |
|---|---|---|
| alpine/ctags(Alpine:v3.7) | < 5.8-r5 | 5.8-r5 |
| alpine/ctags(Alpine:v3.8) | < 5.8-r5 | 5.8-r5 |
| alpine/ctags(Alpine:v3.9) | < 5.8-r5 | 5.8-r5 |
References
- Debian Security Tracker CVE-2014-7204 vendor-advisory
- advisories.mageia.org third-party-advisory
- sourceforge.net issue-tracking patch
- DSA-3042 third-party-advisory vendor-advisory
- MDVSA-2015:178 broken-link vendor-advisory
- [oss-security] 20140929 CVE request: exuberant-ctags: CPU/disk DoS on minified JavaScript file mailing-list third-party-advisory
- USN-2371-1 third-party-advisory vendor-advisory
- bugs.debian.org exploit issue-tracking
- security.alpinelinux.org vendor-advisory
- bugs.debian.org issue-tracking