CVE-2014-7968 VDSM allows remote attackers to cause a denial of service (connection blocking) by keeping an SSL connection open.

MediumCVSS 5.0 EPSS 1.6%

Published: 2014-10-22 17:00
Updated: 2026-06-17 03:16
Exploit status: No public exploit known

Sign in for asset impact Search another CVE

Description

VDSM allows remote attackers to cause a denial of service (connection blocking) by keeping an SSL connection open.

Affected products

Product	Affected versions	Fixed in
redhat virtual desktop service manager	All versions	No fix listed

References

[oss-security] 20141008 Re: CVE request for VDSM denial of service mailing-list
[oss-security] 20141008 Re: CVE request for VDSM denial of service mailing-list
[oss-security] 20141008 CVE request for VDSM denial of service mailing-list
bugzilla.redhat.com

CVSS v2.0

5.0 Medium

AV:N/AC:L/Au:N/C:N/I:N/A:P

Access Vector: Network
Access Complexity: Low
Authentication: None
Confidentiality: None
Integrity: None
Availability: Partial

Weakness & likelihood

EPSS (exploitation probability, 30 days): 1.60% (percentile 76.1)
CWE: CWE-310

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.