CVE-2014-7204
jscript.c in Exuberant Ctags 5.8 allows remote attackers to cause a denial of service (infinite...
jscript.c in Exuberant Ctags 5.8 allows remote attackers to cause a denial of service (infinite loop and CPU and disk consumption) via a crafted JavaScript file.
Exploit likelihood
What each source reports
NVD Score used
jscript.c in Exuberant Ctags 5.8 allows remote attackers to cause a denial of service (infinite loop and CPU and disk consumption) via a crafted JavaScript file.
- Record
CVE-2014-7204- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
jscript.c in Exuberant Ctags 5.8 allows remote attackers to cause a denial of service (infinite loop and CPU and disk consumption) via a crafted JavaScript file.
- Record
CVE-2014-7204- Updated
- 2026-11-02
EUVDEUVD-2014-7078 No score
jscript.c in Exuberant Ctags 5.8 allows remote attackers to cause a denial of service (infinite loop and CPU and disk consumption) via a crafted JavaScript file.
- Record
EUVD-2014-7078- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5p88-49h5-82pm No score
jscript.c in Exuberant Ctags 5.8 allows remote attackers to cause a denial of service (infinite...
jscript.c in Exuberant Ctags 5.8 allows remote attackers to cause a denial of service (infinite loop and CPU and disk consumption) via a crafted JavaScript file.
- Record
GHSA-5p88-49h5-82pm- Updated
- 2026-11-02
OSVALPINE-CVE-2014-7204 No score
jscript.c in Exuberant Ctags 5.8 allows remote attackers to cause a denial of service (infinite loop and CPU and disk consumption) via a crafted JavaScript file.
- Record
ALPINE-CVE-2014-7204- Updated
- 2026-11-03
OSV No score
jscript.c in Exuberant Ctags 5.8 allows remote attackers to cause a denial of service (infinite loop and CPU and disk consumption) via a crafted JavaScript file.
- Record
CVE-2014-7204- Updated
- 2026-11-02
Show 6 moreShow less
OSVDEBIAN-CVE-2014-7204 No score
jscript.c in Exuberant Ctags 5.8 allows remote attackers to cause a denial of service (infinite loop and CPU and disk consumption) via a crafted JavaScript file.
- Record
DEBIAN-CVE-2014-7204- Updated
- 2026-11-02
OSVMGASA-2014-0415 No score
Updated ctags package fixes security vulnerability
A denial of service issue was discovered in ctags 5.8. A remote attacker could cause excessive CPU usage and disk space consumption via a crafted JavaScript file by triggering an infinite loop (CVE-2014-7204).
- Record
MGASA-2014-0415- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10296-1 No score
ctags-5.8-8.1 on GA media
These are all security issues fixed in the ctags-5.8-8.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10296-1- Updated
- 2026-11-02
OSVSUSE-SU-2016:2097-1 No score
Security update for ctags
This update for ctags fixes the following issues:
- CVE-2014-7204: Potential denial of service (infinite loop and CPU and disk consumption) via a crafted JavaScript file. (bsc#899486)
- Missing Requires(post) on coreutils as it is using rm(1). (bsc#976920)
- Record
SUSE-SU-2016:2097-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2014-7204 No score
jscript.c in Exuberant Ctags 5.8 allows remote attackers to cause a denial of service (infinite loop and CPU and disk consumption) via a crafted JavaScript file.
- Record
UBUNTU-CVE-2014-7204- Updated
- 2026-11-02
OSVUSN-2371-1 No score
exuberant-ctags vulnerability
It was discovered that Exuberant Ctags incorrectly handled certain minified js files. An attacker could use this issue to possibly cause Exuberant Ctags to consume resources, resulting in a denial of service.
- Record
USN-2371-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ctagsAlpine:v3.10 |
before 5.8-r5 | 5.8-r5 |
ctagsAlpine:v3.11 |
before 5.8-r5 | 5.8-r5 |
ctagsAlpine:v3.12 |
before 5.8-r5 | 5.8-r5 |
ctagsAlpine:v3.13 |
before 5.8-r5 | 5.8-r5 |
ctagsAlpine:v3.14 |
before 5.8-r5 | 5.8-r5 |
ctagsAlpine:v3.15 |
before 5.8-r5 | 5.8-r5 |
ctagsAlpine:v3.16 |
before 5.8-r5 | 5.8-r5 |
ctagsAlpine:v3.17 |
before 5.8-r5 | 5.8-r5 |
ctagsAlpine:v3.18 |
before 5.8-r5 | 5.8-r5 |
ctagsAlpine:v3.19 |
before 5.8-r5 | 5.8-r5 |
Show 21 moreShow less
| Package | Affected | Fixed |
|---|---|---|
ctagsAlpine:v3.20 |
before 5.8-r5 | 5.8-r5 |
ctagsAlpine:v3.21 |
before 5.8-r5 | 5.8-r5 |
ctagsAlpine:v3.22 |
before 5.8-r5 | 5.8-r5 |
ctagsAlpine:v3.23 |
before 5.8-r5 | 5.8-r5 |
ctagsAlpine:v3.24 |
before 5.8-r5 | 5.8-r5 |
ctagsAlpine:v3.6 |
before 5.8-r5 | 5.8-r5 |
ctagsAlpine:v3.7 |
before 5.8-r5 | 5.8-r5 |
ctagsAlpine:v3.8 |
before 5.8-r5 | 5.8-r5 |
ctagsAlpine:v3.9 |
before 5.8-r5 | 5.8-r5 |
exuberant-ctagsDebian:12 |
before 1:5.9~svn20110310-8 | 1:5.9~svn20110310-8 |
exuberant-ctagsDebian:13 |
before 1:5.9~svn20110310-8 | 1:5.9~svn20110310-8 |
exuberant-ctagsDebian:14 |
before 1:5.9~svn20110310-8 | 1:5.9~svn20110310-8 |
exuberant-ctagsDebian:6.0 |
before 1:5.8-3squeeze2, plus listed versions 1:5.8-31:5.8-3squeeze1 |
1:5.8-3squeeze2 |
exuberant-ctagsDebian:7 |
before 1:5.9~svn20110310-4+deb7u1, plus listed versions 1:5.9~svn20110310-4 |
1:5.9~svn20110310-4+deb7u1 |
ctagsMageia:3 |
before 5.8-6.1.mga3 | 5.8-6.1.mga3 |
ctagsMageia:4 |
before 5.8-7.1.mga4 | 5.8-7.1.mga4 |
ctagsSUSE:Linux Enterprise Desktop 12 SP1 |
before 5.8-7.1 | 5.8-7.1 |
ctagsSUSE:Linux Enterprise Server 12 SP1 |
before 5.8-7.1 | 5.8-7.1 |
ctagsSUSE:Linux Enterprise Server for SAP Applications 12 SP1 |
before 5.8-7.1 | 5.8-7.1 |
exuberant-ctagsUbuntu:14.04:LTS |
before 1:5.9~svn20110310-7ubuntu0.1, plus listed versions 1:5.9~svn20110310-61:5.9~svn20110310-7 |
1:5.9~svn20110310-7ubuntu0.1 |
ctagsopenSUSE:Tumbleweed |
before 5.8-8.1 | 5.8-8.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | OSV | |
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-7204 is a medium vulnerability (CVSS 5.0) in Debian Exuberant Ctags, published October 2, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.82%, the 92nd percentile. Fixed in ctags 5.8-r5.
References
advisories.mageia.org/MGASA-2014-0415.html
ubuntu.com/usn/USN-2371-1
debian.org/security/2014/dsa-3042
bugs.debian.org/cgi-bin/bugreport.cgi?bug=742605
mandriva.com/security/advisories?name=MDVSA-2015:178
openwall.com/lists/oss-security/2014/09/29/40
Show 14 moreShow less
sourceforge.net/p/ctags/code/791
nvd.nist.gov/vuln/detail/CVE-2014-7204
github.com/advisories/GHSA-5p88-49h5-82pm
security.alpinelinux.org/vuln/CVE-2014-7204
security-tracker.debian.org/tracker/CVE-2014-7204
bugs.mageia.org/show_bug.cgi?id=14277
lists.fedoraproject.org/pipermail/package-announce/2014-October/140349.html
suse.com/support/update/announcement/2016/suse-su-20162097-1
bugzilla.suse.com/899486
ubuntu.com/security/CVE-2014-7204
cve.org/CVERecord?id=CVE-2014-7204