What’s Vulnerable › Vulnerabilities

CVE-2014-8119

• Severity: high (CVSS 7.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-12-29 · updated 2026-06-17
• Weakness: CWE-20

Description

The find_ifcfg_path function in netcf before 0.2.7 might allow attackers to cause a denial of service (application crash) via vectors involving augeas path expressions.

Affected products

• Fedoraproject Fedora: 20, 21, 22
• Netcf Project Netcf: through 0.2.6
• Red Hat Enterprise Linux: 6.0, 7.0

References

• http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156571.html
• http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157508.html
• http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157713.html
• http://rhn.redhat.com/errata/RHSA-2015-2248.html
• http://www.securityfocus.com/bid/78046
• https://bugzilla.redhat.com/show_bug.cgi?id=1172176
• https://pagure.io/netcf/blob/050b05c880a6b343baf86780d94764b1aafece37/f/NEWS
• http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156571.html
• http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157508.html
• http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157713.html
• http://rhn.redhat.com/errata/RHSA-2015-2248.html
• http://www.securityfocus.com/bid/78046

Get alerted when CVE-2014-8119 or the next vulnerability affects your stack