{"schemaVersion":3,"id":"CVE-2014-1491","aliases":["RHSA-2014:0979","DEBIAN-CVE-2014-1491"],"status":"published","duplicateOf":null,"title":null,"description":"Mozilla Network Security Services (NSS) before 3.15.4, as used in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, SeaMonkey before 2.24, and other products, does not properly restrict public values in Diffie-Hellman key exchanges, which makes it easier for remote attackers to bypass cryptographic protection mechanisms in ticket handling by leveraging use of a certain value.","dates":{"published":"2014-02-06T02:00:00.000Z","modified":"2024-08-06T09:42:36.031Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":4.3,"severity":"medium","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":4.3,"severity":"medium","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.04601,"percentile":0.91563,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.04601},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.04601,"percentile":0.91563}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.04601,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.04601,"percentile":0.91563}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"REF_048A60A7C937ACF9","name":"Exploit Reference (bugzilla.mozilla.org)","source":"reference","url":"https://bugzilla.mozilla.org/show_bug.cgi?id=934545","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-326","name":"Inadequate Encryption Strength","description":"The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/326.html"}],"affected":[{"vendor":"canonical","product":"ubuntu_linux","name":"ubuntu linux","label":"ubuntu_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"12.04","noFixRecorded":false,"fixedIn":null},{"text":"12.10","noFixRecorded":false,"fixedIn":null},{"text":"13.10","noFixRecorded":false,"fixedIn":null}],"versionsText":"12.04 | 12.10 | 13.10","eol":{"isEol":true,"eolDate":"2017-04-28T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"12.04","label":"12.04 'Precise Pangolin' (LTS)","eolFrom":"2017-04-28T00:00:00.000Z","isLts":true,"isMaintained":false,"latestVersion":"12.04.5"},"product":{"name":"ubuntu","label":"Ubuntu","category":"os"}},"hubHref":"/vendor/canonical/ubuntu_linux"},{"vendor":"debian","product":"nss","name":"nss","label":"nss","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/nss","purlType":"deb","versions":[{"text":"< 2:3.15.4-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2:3.15.4-1","eol":null,"hubHref":null},{"vendor":"debian","product":"debian_linux","name":"debian linux","label":"debian_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"7.0","noFixRecorded":false,"fixedIn":null},{"text":"8.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.0 | 8.0","eol":{"isEol":true,"eolDate":"2018-05-31T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"7","label":"7 (Wheezy)","eolFrom":"2018-05-31T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":"7.11"},"product":{"name":"debian","label":"Debian","category":"os"}},"hubHref":"/vendor/debian/debian_linux"},{"vendor":"fedoraproject","product":"fedora","name":"fedora","label":"fedora","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"19","noFixRecorded":false,"fixedIn":null},{"text":"20","noFixRecorded":false,"fixedIn":null}],"versionsText":"19 | 20","eol":{"isEol":true,"eolDate":"2015-01-06T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"19","label":"19 (Schrödinger's Cat)","eolFrom":"2015-01-06T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":null},"product":{"name":"fedora","label":"Fedora Linux","category":"os"}},"hubHref":"/vendor/fedoraproject/fedora"},{"vendor":"mozilla","product":"firefox","name":"firefox","label":"firefox","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 24.3","noFixRecorded":false,"fixedIn":null},{"text":"< 27.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 24.3 | < 27.0","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"firefox","label":"Firefox","category":"app"}},"hubHref":"/vendor/mozilla/firefox"},{"vendor":"mozilla","product":"network_security_services","name":"network security services","label":"network_security_services","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 3.15.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.15.4","eol":null,"hubHref":"/vendor/mozilla/network_security_services"},{"vendor":"mozilla","product":"seamonkey","name":"seamonkey","label":"seamonkey","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 2.24","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.24","eol":null,"hubHref":"/vendor/mozilla/seamonkey"},{"vendor":"mozilla","product":"thunderbird","name":"thunderbird","label":"thunderbird","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 24.3.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 24.3.0","eol":null,"hubHref":"/vendor/mozilla/thunderbird"},{"vendor":"opensuse","product":"opensuse","name":"opensuse","label":"opensuse","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"11.4","noFixRecorded":false,"fixedIn":null},{"text":"12.3","noFixRecorded":false,"fixedIn":null},{"text":"13.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"11.4 | 12.3 | 13.1","eol":{"isEol":true,"eolDate":"2012-11-05T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"11.4","label":"11.4","eolFrom":"2012-11-05T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":null},"product":{"name":"opensuse","label":"openSUSE","category":"os"}},"hubHref":"/vendor/opensuse/opensuse"},{"vendor":"oracle","product":"enterprise_manager_ops_center","name":"enterprise manager ops center","label":"enterprise_manager_ops_center","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 12.1.4","noFixRecorded":false,"fixedIn":null},{"text":"12.2.0","noFixRecorded":false,"fixedIn":null},{"text":"12.2.1","noFixRecorded":false,"fixedIn":null},{"text":"12.3.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 12.1.4 | 12.2.0 | 12.2.1 | 12.3.0","eol":null,"hubHref":"/vendor/oracle/enterprise_manager_ops_center"},{"vendor":"oracle","product":"vm_server","name":"vm server","label":"vm_server","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"3.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"3.2","eol":null,"hubHref":"/vendor/oracle/vm_server"},{"vendor":"redhat","product":"rhev-hypervisor6","name":"rhev-hypervisor6","label":"rhev-hypervisor6","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/rhev-hypervisor6","purlType":"rpm","versions":[{"text":"< 0:6.5-20140725.0.el6ev","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:6.5-20140725.0.el6ev","eol":null,"hubHref":null},{"vendor":"suse","product":"linux_enterprise_desktop","name":"linux enterprise desktop","label":"linux_enterprise_desktop","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"11:sp3","noFixRecorded":false,"fixedIn":null}],"versionsText":"11:sp3","eol":null,"hubHref":"/vendor/suse/linux_enterprise_desktop"},{"vendor":"suse","product":"linux_enterprise_server","name":"linux enterprise server","label":"linux_enterprise_server","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"11:sp3","noFixRecorded":false,"fixedIn":null}],"versionsText":"11:sp3","eol":null,"hubHref":"/vendor/suse/linux_enterprise_server"},{"vendor":"suse","product":"linux_enterprise_software_development_kit","name":"linux enterprise software development kit","label":"linux_enterprise_software_development_kit","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"11:sp3","noFixRecorded":false,"fixedIn":null}],"versionsText":"11:sp3","eol":null,"hubHref":"/vendor/suse/linux_enterprise_software_development_kit"}],"affectedCount":15,"eol":{"hasEol":true,"count":4},"references":[{"url":"http://www.ubuntu.com/usn/USN-2119-1","label":"www.ubuntu.com/usn/USN-2119-1","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","label":"www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","hostname":"www.oracle.com","tags":["X Refsource CONFIRM","Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1029721","label":"www.securitytracker.com/id/1029721","hostname":"www.securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Third Party Advisory"]},{"url":"http://hg.mozilla.org/projects/nss/rev/12c42006aed8","label":"hg.mozilla.org/projects/nss/rev/12c42006aed8","hostname":"hg.mozilla.org","tags":["X Refsource CONFIRM","Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00004.html","label":"lists.opensuse.org/opensuse-security-announce/2014-02/msg00004.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/90886","label":"exchange.xforce.ibmcloud.com/vulnerabilities/90886","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF","Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1029717","label":"www.securitytracker.com/id/1029717","hostname":"www.securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2014-0012.html","label":"www.vmware.com/security/advisories/VMSA-2014-0012.html","hostname":"www.vmware.com","tags":["X Refsource CONFIRM","Not Applicable"]},{"url":"http://www.debian.org/security/2014/dsa-2994","label":"www.debian.org/security/2014/dsa-2994","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/65332","label":"www.securityfocus.com/bid/65332","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Third Party Advisory"]},{"url":"http://secunia.com/advisories/56922","label":"secunia.com/advisories/56922","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=934545","label":"bugzilla.mozilla.org/show_bug.cgi?id=934545","hostname":"bugzilla.mozilla.org","tags":["X Refsource CONFIRM","Exploit","Issue Tracking","Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1029720","label":"www.securitytracker.com/id/1029720","hostname":"www.securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Third Party Advisory"]},{"url":"http://secunia.com/advisories/56858","label":"secunia.com/advisories/56858","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","label":"www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","hostname":"www.oracle.com","tags":["X Refsource CONFIRM","Third Party Advisory"]},{"url":"http://www.debian.org/security/2014/dsa-2858","label":"www.debian.org/security/2014/dsa-2858","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN","Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/534161/100/0/threaded","label":"www.securityfocus.com/archive/1/534161/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ","Not Applicable"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html","label":"www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html","hostname":"www.oracle.com","tags":["X Refsource CONFIRM","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2102-2","label":"www.ubuntu.com/usn/USN-2102-2","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201504-01","label":"security.gentoo.org/glsa/201504-01","hostname":"security.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO","Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2014/mfsa2014-12.html","label":"www.mozilla.org/security/announce/2014/mfsa2014-12.html","hostname":"www.mozilla.org","tags":["X Refsource CONFIRM","Third Party Advisory","Vendor Advisory","ARTICLE"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html","label":"www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html","hostname":"www.oracle.com","tags":["X Refsource CONFIRM","Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761","label":"kb.juniper.net/InfoCenter/index?page=content&id=JSA10761","hostname":"kb.juniper.net","tags":["X Refsource CONFIRM","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2014/Dec/23","label":"seclists.org/fulldisclosure/2014/Dec/23","hostname":"seclists.org","tags":["Mailing List","X Refsource FULLDISC","Not Applicable"]},{"url":"http://secunia.com/advisories/56888","label":"secunia.com/advisories/56888","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-February/129218.html","label":"lists.fedoraproject.org/pipermail/package-announce/2014-February/129218.html","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory","X Refsource FEDORA","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html","label":"lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html","label":"www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html","hostname":"www.oracle.com","tags":["X Refsource CONFIRM","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-February/127966.html","label":"lists.fedoraproject.org/pipermail/package-announce/2014-February/127966.html","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory","X Refsource FEDORA","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00010.html","label":"lists.opensuse.org/opensuse-security-announce/2014-02/msg00010.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00005.html","label":"lists.opensuse.org/opensuse-security-announce/2014-02/msg00005.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2102-1","label":"www.ubuntu.com/usn/USN-2102-1","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU","Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2014:0979","label":"access.redhat.com/errata/RHSA-2014:0979","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","label":"access.redhat.com/security/updates/classification/","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Hypervisor_Deployment_Guide/chap-Deployment_Guide-Upgrading_Red_Hat_Enterprise_Virtualization_Hypervisors.html","label":"access.redhat.com/site/…","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1060955","label":"bugzilla.redhat.com/show_bug.cgi?id=1060955","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1118298","label":"bugzilla.redhat.com/show_bug.cgi?id=1118298","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0979.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0979.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-1491","label":"access.redhat.com/security/cve/CVE-2014-1491","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-1491","label":"www.cve.org/CVERecord?id=CVE-2014-1491","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-1491","label":"nvd.nist.gov/vuln/detail/CVE-2014-1491","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2014-1491","label":"security-tracker.debian.org/tracker/CVE-2014-1491","hostname":"security-tracker.debian.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["DLA-23-1","DSA-2858-1","DSA-2994-1","OPENSUSE-SU-2024:10071-1","OPENSUSE-SU-2024:10230-1","OPENSUSE-SU-2024:10451-1","RHSA-2014:0917","RHSA-2014:1246"],"duplicates":[],"related":["OPENSUSE-SU-2024:10071-1","OPENSUSE-SU-2024:10230-1","OPENSUSE-SU-2024:10451-1"]},"timeline":[{"kind":"published","date":"2014-02-06T02:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-06T09:42:36.031Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":28,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T18:24:45.558Z","stale":false,"partial":false}}