CVE-2014-9708 Embedthis Appweb before 4.6.6 and 5.x before 5.2.1 allows remote attackers to cause a denial of service (NULL pointer dereference) via a Range header with an empty value, as demonstrated by "Range: x=...
MediumCVSS 5.0
EPSS 56.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Embedthis Appweb before 4.6.6 and 5.x before 5.2.1 allows remote attackers to cause a denial of service (NULL pointer dereference) via a Range header with an empty value, as demonstrated by "Range: x=,".
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle enterprise communications broker | <= 2.0.0 | No fix listed |
| embedthis appweb | < 4.6.6 | 4.6.6 |
| embedthis appweb | >= 5.0.0, < 5.2.1 | 5.2.1 |
| juniper junos | = 12.1x46 | No fix listed |
| juniper junos | = 12.1x46-d10 | No fix listed |
| juniper junos | = 12.1x46-d15 | No fix listed |
| juniper junos | = 12.1x46-d20 | No fix listed |
| juniper junos | = 12.1x46-d25 | No fix listed |
| juniper junos | = 12.1x46-d30 | No fix listed |
| juniper junos | = 12.1x46-d35 | No fix listed |
| juniper junos | = 12.1x46-d40 | No fix listed |
| juniper junos | = 12.1x46-d45 | No fix listed |
| juniper junos | = 12.1x46-d50 | No fix listed |
| juniper junos | = 12.1x46-d55 | No fix listed |
| juniper junos | = 12.1x46-d60 | No fix listed |
| juniper junos | = 12.1x46-d65 | No fix listed |
| juniper junos | = 12.1x46-d66 | No fix listed |
| juniper junos | = 12.1x46-d67 | No fix listed |
| juniper junos | = 12.1x46-d70 | No fix listed |
| juniper junos | = 12.1x46-d71 | No fix listed |
| juniper junos | = 12.1x46-d72 | No fix listed |
| juniper junos | = 12.1x46-d73 | No fix listed |
| juniper junos | = 12.1x46-d76 | No fix listed |
| juniper junos | = 12.1x46-d77 | No fix listed |
| juniper junos | = 12.3x48 | No fix listed |
Show 175 more
| Product | Affected versions | Fixed in |
|---|---|---|
| juniper junos | = 12.3x48-d10 | No fix listed |
| juniper junos | = 12.3x48-d15 | No fix listed |
| juniper junos | = 12.3x48-d20 | No fix listed |
| juniper junos | = 12.3x48-d25 | No fix listed |
| juniper junos | = 12.3x48-d30 | No fix listed |
| juniper junos | = 12.3x48-d35 | No fix listed |
| juniper junos | = 12.3x48-d40 | No fix listed |
| juniper junos | = 12.3x48-d45 | No fix listed |
| juniper junos | = 12.3x48-d50 | No fix listed |
| juniper junos | = 12.3x48-d51 | No fix listed |
| juniper junos | = 12.3x48-d55 | No fix listed |
| juniper junos | = 12.3x48-d60 | No fix listed |
| juniper junos | = 12.3x48-d65 | No fix listed |
| juniper junos | = 12.3x48-d66 | No fix listed |
| juniper junos | = 12.3x48-d70 | No fix listed |
| juniper junos | = 12.3x48-d75 | No fix listed |
| juniper junos | = 15.1x49 | No fix listed |
| juniper junos | = 15.1x49-d10 | No fix listed |
| juniper junos | = 15.1x49-d100 | No fix listed |
| juniper junos | = 15.1x49-d110 | No fix listed |
| juniper junos | = 15.1x49-d120 | No fix listed |
| juniper junos | = 15.1x49-d130 | No fix listed |
| juniper junos | = 15.1x49-d131 | No fix listed |
| juniper junos | = 15.1x49-d140 | No fix listed |
| juniper junos | = 15.1x49-d15 | No fix listed |
| juniper junos | = 15.1x49-d150 | No fix listed |
| juniper junos | = 15.1x49-d160 | No fix listed |
| juniper junos | = 15.1x49-d170 | No fix listed |
| juniper junos | = 15.1x49-d20 | No fix listed |
| juniper junos | = 15.1x49-d25 | No fix listed |
| juniper junos | = 15.1x49-d30 | No fix listed |
| juniper junos | = 15.1x49-d35 | No fix listed |
| juniper junos | = 15.1x49-d40 | No fix listed |
| juniper junos | = 15.1x49-d45 | No fix listed |
| juniper junos | = 15.1x49-d50 | No fix listed |
| juniper junos | = 15.1x49-d55 | No fix listed |
| juniper junos | = 15.1x49-d60 | No fix listed |
| juniper junos | = 15.1x49-d65 | No fix listed |
| juniper junos | = 15.1x49-d70 | No fix listed |
| juniper junos | = 15.1x49-d75 | No fix listed |
| juniper junos | = 15.1x49-d80 | No fix listed |
| juniper junos | = 15.1x49-d90 | No fix listed |
| juniper junos | = 12.3 | No fix listed |
| juniper junos | = 12.3-r1 | No fix listed |
| juniper junos | = 12.3-r10 | No fix listed |
| juniper junos | = 12.3-r10-s1 | No fix listed |
| juniper junos | = 12.3-r10-s2 | No fix listed |
| juniper junos | = 12.3-r11 | No fix listed |
| juniper junos | = 12.3-r12 | No fix listed |
| juniper junos | = 12.3-r12-s1 | No fix listed |
| juniper junos | = 12.3-r12-s10 | No fix listed |
| juniper junos | = 12.3-r12-s11 | No fix listed |
| juniper junos | = 12.3-r12-s12 | No fix listed |
| juniper junos | = 12.3-r12-s3 | No fix listed |
| juniper junos | = 12.3-r12-s4 | No fix listed |
| juniper junos | = 12.3-r12-s6 | No fix listed |
| juniper junos | = 12.3-r12-s8 | No fix listed |
| juniper junos | = 12.3-r13 | No fix listed |
| juniper junos | = 12.3-r2 | No fix listed |
| juniper junos | = 12.3-r3 | No fix listed |
| juniper junos | = 12.3-r4 | No fix listed |
| juniper junos | = 12.3-r5 | No fix listed |
| juniper junos | = 12.3-r6 | No fix listed |
| juniper junos | = 12.3-r7 | No fix listed |
| juniper junos | = 12.3-r8 | No fix listed |
| juniper junos | = 12.3-r9 | No fix listed |
| juniper junos | = 15.1 | No fix listed |
| juniper junos | = 15.1-a1 | No fix listed |
| juniper junos | = 15.1-f | No fix listed |
| juniper junos | = 15.1-f1 | No fix listed |
| juniper junos | = 15.1-f2 | No fix listed |
| juniper junos | = 15.1-f2-s1 | No fix listed |
| juniper junos | = 15.1-f2-s2 | No fix listed |
| juniper junos | = 15.1-f2-s3 | No fix listed |
| juniper junos | = 15.1-f2-s4 | No fix listed |
| juniper junos | = 15.1-f3 | No fix listed |
| juniper junos | = 15.1-f4 | No fix listed |
| juniper junos | = 15.1-f5 | No fix listed |
| juniper junos | = 15.1-f5-s7 | No fix listed |
| juniper junos | = 15.1-f6 | No fix listed |
| juniper junos | = 15.1-f6-s1 | No fix listed |
| juniper junos | = 15.1-f6-s10 | No fix listed |
| juniper junos | = 15.1-f6-s12 | No fix listed |
| juniper junos | = 15.1-f6-s2 | No fix listed |
| juniper junos | = 15.1-f6-s3 | No fix listed |
| juniper junos | = 15.1-f6-s4 | No fix listed |
| juniper junos | = 15.1-f6-s5 | No fix listed |
| juniper junos | = 15.1-f6-s6 | No fix listed |
| juniper junos | = 15.1-f6-s7 | No fix listed |
| juniper junos | = 15.1-f6-s8 | No fix listed |
| juniper junos | = 15.1-f6-s9 | No fix listed |
| juniper junos | = 15.1x53 | No fix listed |
| juniper junos | = 15.1x53-d10 | No fix listed |
| juniper junos | = 15.1x53-d20 | No fix listed |
| juniper junos | = 15.1x53-d21 | No fix listed |
| juniper junos | = 15.1x53-d210 | No fix listed |
| juniper junos | = 15.1x53-d230 | No fix listed |
| juniper junos | = 15.1x53-d231 | No fix listed |
| juniper junos | = 15.1x53-d232 | No fix listed |
| juniper junos | = 15.1x53-d233 | No fix listed |
| juniper junos | = 15.1x53-d234 | No fix listed |
| juniper junos | = 15.1x53-d235 | No fix listed |
| juniper junos | = 15.1x53-d236 | No fix listed |
| juniper junos | = 15.1x53-d237 | No fix listed |
| juniper junos | = 15.1x53-d25 | No fix listed |
| juniper junos | = 15.1x53-d30 | No fix listed |
| juniper junos | = 15.1x53-d31 | No fix listed |
| juniper junos | = 15.1x53-d32 | No fix listed |
| juniper junos | = 15.1x53-d33 | No fix listed |
| juniper junos | = 15.1x53-d34 | No fix listed |
| juniper junos | = 15.1x53-d40 | No fix listed |
| juniper junos | = 15.1x53-d45 | No fix listed |
| juniper junos | = 15.1x53-d47 | No fix listed |
| juniper junos | = 15.1x53-d470 | No fix listed |
| juniper junos | = 15.1x53-d471 | No fix listed |
| juniper junos | = 15.1x53-d48 | No fix listed |
| juniper junos | = 15.1x53-d490 | No fix listed |
| juniper junos | = 15.1x53-d495 | No fix listed |
| juniper junos | = 15.1x53-d50 | No fix listed |
| juniper junos | = 15.1x53-d51 | No fix listed |
| juniper junos | = 15.1x53-d52 | No fix listed |
| juniper junos | = 15.1x53-d55 | No fix listed |
| juniper junos | = 15.1x53-d56 | No fix listed |
| juniper junos | = 15.1x53-d57 | No fix listed |
| juniper junos | = 15.1x53-d58 | No fix listed |
| juniper junos | = 15.1x53-d59 | No fix listed |
| juniper junos | = 15.1x53-d590 | No fix listed |
| juniper junos | = 15.1x53-d60 | No fix listed |
| juniper junos | = 15.1x53-d61 | No fix listed |
| juniper junos | = 15.1x53-d62 | No fix listed |
| juniper junos | = 15.1x53-d63 | No fix listed |
| juniper junos | = 15.1x53-d64 | No fix listed |
| juniper junos | = 15.1x53-d65 | No fix listed |
| juniper junos | = 15.1x53-d66 | No fix listed |
| juniper junos | = 15.1x53-d67 | No fix listed |
| juniper junos | = 15.1x53-d68 | No fix listed |
| juniper junos | = 15.1x53-d70 | No fix listed |
| juniper junos | = 15.1-f7 | No fix listed |
| juniper junos | = 15.1-r | No fix listed |
| juniper junos | = 15.1-r1 | No fix listed |
| juniper junos | = 15.1-r2 | No fix listed |
| juniper junos | = 15.1-r3 | No fix listed |
| juniper junos | = 15.1-r4 | No fix listed |
| juniper junos | = 15.1-r4-s7 | No fix listed |
| juniper junos | = 15.1-r4-s8 | No fix listed |
| juniper junos | = 15.1-r4-s9 | No fix listed |
| juniper junos | = 15.1-r5 | No fix listed |
| juniper junos | = 15.1-r5-s1 | No fix listed |
| juniper junos | = 15.1-r5-s3 | No fix listed |
| juniper junos | = 15.1-r5-s5 | No fix listed |
| juniper junos | = 15.1-r5-s6 | No fix listed |
| juniper junos | = 15.1-r6 | No fix listed |
| juniper junos | = 15.1-r6-s1 | No fix listed |
| juniper junos | = 15.1-r6-s2 | No fix listed |
| juniper junos | = 15.1-r6-s3 | No fix listed |
| juniper junos | = 15.1-r6-s4 | No fix listed |
| juniper junos | = 15.1-r6-s6 | No fix listed |
| juniper junos | = 15.1-r7 | No fix listed |
| juniper junos | = 15.1-r7-s1 | No fix listed |
| juniper junos | = 15.1-r7-s10 | No fix listed |
| juniper junos | = 15.1-r7-s11 | No fix listed |
| juniper junos | = 15.1-r7-s12 | No fix listed |
| juniper junos | = 15.1-r7-s2 | No fix listed |
| juniper junos | = 15.1-r7-s3 | No fix listed |
| juniper junos | = 16.1 | No fix listed |
| juniper junos | = 16.1-r1 | No fix listed |
| juniper junos | = 16.1-r2 | No fix listed |
| juniper junos | = 16.1-r3 | No fix listed |
| juniper junos | = 16.1-r3-s10 | No fix listed |
| juniper junos | = 16.1-r3-s11 | No fix listed |
| juniper junos | = 16.1-r3-s8 | No fix listed |
| juniper junos | = 16.1-r4 | No fix listed |
| juniper junos | = 16.1-r4-s12 | No fix listed |
| juniper junos | = 16.1-r4-s2 | No fix listed |
| juniper junos | = 16.1-r4-s3 | No fix listed |
References
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- 20150408 Re: [oss-security] Advisory: CVE-2014-9708: Appweb Web Server mailing-list third-party-advisory vdb-entry
- 20150328 Advisory: CVE-2014-9708: Appweb Web Server exploit mailing-list third-party-advisory vdb-entry
- [oss-security] 20150328 Advisory: CVE-2014-9708: Appweb Web Server mailing-list patch
- [oss-security] 20150406 Re: Advisory: CVE-2014-9708: Appweb Web Server mailing-list patch
- www.oracle.com patch third-party-advisory
- 20150328 Advisory: CVE-2014-9708: Appweb Web Server broken-link mailing-list third-party-advisory vdb-entry
- 20150328 Advisory: CVE-2014-9708: Appweb Web Server broken-link mailing-list third-party-advisory vdb-entry
- 73407 broken-link third-party-advisory vdb-entry
- 1037007 broken-link third-party-advisory vdb-entry
- github.com broken-link patch
- github.com broken-link exploit issue-tracking
- security.paloaltonetworks.com third-party-advisory
- supportportal.juniper.net third-party-advisory