CVE-2014-0084
published 2019-11-21CVE-2014-0084: Ruby gem openshift-origin-node before 2014-02-14 does not contain a cronjob timeout which could result in a denial of service in cron.daily and cron.weekly.
PriorityP418medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.31%
23.1th percentile
Ruby gem openshift-origin-node before 2014-02-14 does not contain a cronjob timeout which could result in a denial of service in cron.daily and cron.weekly.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| redhat | openshift_origin | < 2014-02-14 | 2014-02-14 |
| rubygem-openshift-origin-node | rubygem-openshift-origin-node | — | — |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
nvdv2.02.1LOWAV:L/AC:L/Au:N/C:N/I:N/A:P
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
rubygem-openshift-origin-node: cron.daily/cron.weekly denial of service
vendor_redhat·2014-02-14·CVSS 5.5
CVE-2014-0084 [MEDIUM] CWE-400 rubygem-openshift-origin-node: cron.daily/cron.weekly denial of service
rubygem-openshift-origin-node: cron.daily/cron.weekly denial of service
Ruby gem openshift-origin-node before 2014-02-14 does not contain a cronjob timeout which could result in a denial of service in cron.daily and cron.weekly.
Package: rubygem-openshift-origin-node (OpenShift Enterprise 1) - Will not fix
OSV
openshift-origin-node Improper Input Validation vulnerability
osv·2022-05-17
CVE-2014-0084 [MEDIUM] openshift-origin-node Improper Input Validation vulnerability
openshift-origin-node Improper Input Validation vulnerability
Ruby gem openshift-origin-node before 2014-02-14 does not contain a cronjob timeout which could result in a denial of service in cron.daily and cron.weekly.
GHSA
openshift-origin-node Improper Input Validation vulnerability
ghsa·2022-05-17
CVE-2014-0084 [MEDIUM] CWE-20 openshift-origin-node Improper Input Validation vulnerability
openshift-origin-node Improper Input Validation vulnerability
Ruby gem openshift-origin-node before 2014-02-14 does not contain a cronjob timeout which could result in a denial of service in cron.daily and cron.weekly.
No detection rules found.
No public exploits indexed.
2019-11-21
Published