CVE-2014-0219

Severity: medium (CVSS 5.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-11-15 · updated 2026-06-17
Weakness: CWE-20

Description

Apache Karaf before 4.0.10 enables a shutdown port on the loopback interface, which allows local users to cause a denial of service (shutdown) by sending a shutdown command to all listening high ports.

Affected products

Apache Software Foundation Apache Karaf: before 4.0.10 — fixed in 4.0.10

How to fix

Upgrade to a fixed version: Apache Software Foundation Apache Karaf 4.0.10. Check the vendor advisory for mitigations.

References

http://karaf.apache.org/security/cve-2014-0219.txt
http://www.securityfocus.com/bid/101872
https://bugzilla.redhat.com/show_bug.cgi?id=1095974
http://karaf.apache.org/security/cve-2014-0219.txt
http://www.securityfocus.com/bid/101872
https://bugzilla.redhat.com/show_bug.cgi?id=1095974

Get alerted when CVE-2014-0219 or the next vulnerability affects your stack