6.8

CVE-2014-8104: canonical ubuntu_linux Resource Management Errors

CVSS: 6.8v2.0MediumModified
AliasesMGASA-2014-0512UBUNTU-CVE-2014-8104USN-2430-1
Published 03-12-2014Last modified 06-08-2024
Open JSON

Vulnerability summary

CVE-2014-8104 is a medium (CVSS 6.8) Resource Management Errors vulnerability in canonical ubuntu_linux. EPSS estimates a 3.48% chance of exploitation in the next 30 days, higher than 88.9% of scored vulnerabilities.

Overall risk
28/100
0100
Medium · default modelHow is this calculated?
CVSS score
6.8/10
010
Medium · v2.0 (NVD)
EPSS score
3.48%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Timeline

  1. 03-12-2014
    PublishedVulnerability first disclosed.
  2. 06-08-2024
    Last modifiedVulnerability information updated.

Description

OpenVPN 2.x before 2.0.11, 2.1.x, 2.2.x before 2.2.3, and 2.3.x before 2.3.6 allows remote authenticated users to cause a denial of service (server crash) via a small control channel packet.

CVSS metrics

1 score · 1 source · 1 version

EPSS trend

Probability

3.48%

Chance of exploitation in the next 30 days

Percentile

89%

Versus all other CVEs

30-day change

0.00 pp

From 3.48% on 20-09-2026

20-09-202620-10-2026
EPSS score
3.48%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Debian2 products
  • openvpn< 2.3.4-5 | < 2.1.3-2+squeeze3 | < 2.2.1-8+deb7u3
  • debian_linuxEOL7.0 | 8.0
Mageia2 products
  • openvpn< 2.3.2-3.1.mga4
  • mageiaEOL4.0
Opensuse2 products
  • opensuseEOL12.3 | 13.1 | 13.2
  • openvpn&distro=openSUSE Tumbleweed< 2.3.11-3.1
Openvpn2 products
  • openvpnEOL2.0.1_rc1 | 2.0.1_rc2 | 2.0.1_rc3 | 2.0.1_rc4 | 2.0.1_rc5 | 2.0.1_rc6 | 2.0.1_rc7 | 2.0.2_rc1 | 2.0.3_rc1 | 2.0.4 | 2.0.6_rc1 | 2.0.9 | 2.0_rc1 | 2.0_rc2 | 2.0_rc3 | 2.0_rc4 | 2.0_rc5 | 2.0_rc6 | 2.0_rc7 | 2.0_rc8 | 2.0_rc9 | 2.0_rc10 | 2.0_rc11 | 2.0_rc12 | 2.0_rc13 | 2.0_rc14 | 2.0_rc15 | 2.0_rc16 | 2.0_rc17 | 2.0_rc18 | 2.0_rc19 | 2.0_rc20 | 2.0_rc21 | 2.0_test1 | 2.0_test2 | 2.0_test3 | 2.0_test4 | 2.0_test5 | 2.0_test6 | 2.0_test7 | 2.0_test8 | 2.0_test9 | 2.0_test10 | 2.0_test11 | 2.0_test12 | 2.0_test14 | 2.0_test15 | 2.0_test16 | 2.0_test17 | 2.0_test18 | 2.0_test19 | 2.0_test20 | 2.0_test21 | 2.0_test22 | 2.0_test23 | 2.0_test24 | 2.0_test25 | 2.0_test26 | 2.0_test27 | 2.0_test28 | 2.0_test29 | 2.1:beta-1 | 2.1:beta-10 | 2.1:beta-11 | 2.1:beta-12 | 2.1:beta-13 | 2.1:beta-14 | 2.1:beta-15 | 2.1:beta-16 | 2.1:beta-2 | 2.1:beta-3 | 2.1:beta-4 | 2.1:beta-5 | 2.1:beta-6 | 2.1:beta-7 | 2.1:beta-8 | 2.1:beta-9 | 2.1:rc_1 | 2.1:rc_10 | 2.1:rc_11 | 2.1:rc_12 | 2.1:rc_13 | 2.1:rc_14 | 2.1:rc_15 | 2.1:rc_16 | 2.1:rc_17 | 2.1:rc_18 | 2.1:rc_19 | 2.1:rc_2 | 2.1:rc_20 | 2.1:rc_21 | 2.1:rc_22 | 2.1:rc_3 | 2.1:rc_4 | 2.1:rc_5 | 2.1:rc_6 | 2.1:rc_7 | 2.1:rc_8 | 2.1:rc_9 | 2.1.0 | 2.1.1 | 2.1.2 | 2.1.3 | 2.1.4 | 2.2:beta1 | 2.2:beta2 | 2.2:beta3 | 2.2:beta4 | 2.2:beta5 | 2.2.0 | 2.2.1 | 2.2.2 | 2.3:alpha1 | 2.3:alpha2 | 2.3:alpha3 | 2.3:beta1 | 2.3:rc1 | 2.3:rc2 | 2.3.0 | 2.3.1 | 2.3.2 | 2.3.3 | 2.3.4 | 2.3.5
  • openvpn_access_server2.0.0 | 2.0.1 | 2.0.2 | 2.0.3 | 2.0.5 | 2.0.6 | 2.0.7 | 2.0.8 | 2.0.10
Canonical1 product
Ubuntu1 product
  • openvpn< 2.3.2-7ubuntu3.1

6 vendors · 10 products

References

14 links
Show all 14 references