What’s Vulnerable › Vulnerabilities

CVE-2014-2537

• Severity: high (CVSS 7.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-03-18 · updated 2026-06-17
• Weakness: CWE-399

Description

Memory leak in the TCP stack in the kernel in Sophos UTM before 9.109 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors.

Affected products

• Sophos Unified Threat Management: 110, 120, 220, 320, 425, 525 (+1)
• Sophos Unified Threat Management Software: through 9.108; 8.3, 9.007, 9.107

References

• http://blogs.sophos.com/2014/02/20/utm-up2date-9-109/
• http://secunia.com/advisories/57344
• http://www.securityfocus.com/bid/66231
• http://www.securitytracker.com/id/1029920
• http://blogs.sophos.com/2014/02/20/utm-up2date-9-109/
• http://secunia.com/advisories/57344
• http://www.securityfocus.com/bid/66231
• http://www.securitytracker.com/id/1029920

Get alerted when CVE-2014-2537 or the next vulnerability affects your stack