{"id":"CVE-2014-8119","aliases":["EUVD-2014-7964","GHSA-rqwf-j354-5q38","RHBA-2015:1307","RHSA-2015:2248","SUSE-SU-2015:1249-1","SUSE-SU-2015:1792-1","SUSE-SU-2018:0653-1","openSUSE-SU-2024:10641-1"],"status":"published","title":"The find_ifcfg_path function in netcf before 0.2.7 might allow attackers to cause a denial of...","description":"The find_ifcfg_path function in netcf before 0.2.7 might allow attackers to cause a denial of service (application crash) via vectors involving augeas path expressions.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.0265,"percentile":0.85727,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20"],"published":"2015-06-24T07:08:14Z","modified":"2026-06-26T10:28:56Z","fixes":[{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"netcf","fixed_in":["0:0.2.4-3.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"netcf-debuginfo","fixed_in":["0:0.2.4-3.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"netcf-devel","fixed_in":["0:0.2.4-3.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"netcf-libs","fixed_in":["0:0.2.4-3.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"netcf","fixed_in":["0:0.2.4-3.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"netcf-debuginfo","fixed_in":["0:0.2.4-3.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"netcf-devel","fixed_in":["0:0.2.4-3.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"netcf-libs","fixed_in":["0:0.2.4-3.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"netcf","fixed_in":["0:0.2.4-3.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"netcf-debuginfo","fixed_in":["0:0.2.4-3.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"netcf-devel","fixed_in":["0:0.2.4-3.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"netcf-libs","fixed_in":["0:0.2.4-3.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"netcf","fixed_in":["0:0.2.4-3.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"netcf-debuginfo","fixed_in":["0:0.2.4-3.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"netcf-devel","fixed_in":["0:0.2.4-3.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"netcf-libs","fixed_in":["0:0.2.4-3.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"netcf","fixed_in":["0:0.2.8-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"netcf-debuginfo","fixed_in":["0:0.2.8-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"netcf-devel","fixed_in":["0:0.2.8-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"netcf-libs","fixed_in":["0:0.2.8-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"netcf","fixed_in":["0:0.2.8-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"netcf-debuginfo","fixed_in":["0:0.2.8-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"netcf-devel","fixed_in":["0:0.2.8-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"netcf-libs","fixed_in":["0:0.2.8-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"netcf","fixed_in":["0:0.2.8-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"netcf-debuginfo","fixed_in":["0:0.2.8-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"netcf-devel","fixed_in":["0:0.2.8-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"netcf-libs","fixed_in":["0:0.2.8-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"netcf","fixed_in":["0:0.2.8-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"netcf-debuginfo","fixed_in":["0:0.2.8-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"netcf-devel","fixed_in":["0:0.2.8-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"netcf-libs","fixed_in":["0:0.2.8-1.el7"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"augeas","fixed_in":["1.2.0-3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"augeas","fixed_in":["1.2.0-3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12","package":"augeas","fixed_in":["1.2.0-3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"augeas","fixed_in":["1.2.0-3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP3","package":"augeas","fixed_in":["0.9.0-3.17.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"augeas","fixed_in":["0.9.0-3.17.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 11 SP3","package":"augeas","fixed_in":["0.9.0-3.17.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 11 SP4","package":"augeas","fixed_in":["0.9.0-3.17.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"augeas","fixed_in":["0.9.0-3.17.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"augeas","fixed_in":["0.9.0-3.17.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"augeas","fixed_in":["0.9.0-3.17.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"augeas","fixed_in":["0.9.0-3.17.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"augeas","fixed_in":["0.9.0-3.17.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"netcf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.4-3.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"netcf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.4-3.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"netcf-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.4-3.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"netcf-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.4-3.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"netcf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.4-3.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"netcf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.4-3.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"netcf-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.4-3.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"netcf-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.4-3.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"netcf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.4-3.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"netcf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.4-3.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"netcf-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.4-3.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"netcf-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.4-3.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"netcf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.4-3.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"netcf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.4-3.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"netcf-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.4-3.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"netcf-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.4-3.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"netcf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.8-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"netcf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.8-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"netcf-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.8-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"netcf-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.8-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"netcf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.8-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"netcf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.8-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"netcf-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.8-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"netcf-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.8-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"netcf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.8-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"netcf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.8-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"netcf-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.8-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"netcf-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.8-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"netcf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.8-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"netcf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.8-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"netcf-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.8-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"netcf-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.8-1.el7"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"augeas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0-3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"augeas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0-3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"augeas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0-3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"augeas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0-3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP3","package":"augeas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.0-3.17.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"augeas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.0-3.17.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP3","package":"augeas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.0-3.17.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP4","package":"augeas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.0-3.17.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"augeas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.0-3.17.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"augeas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.0-3.17.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"augeas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.0-3.17.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"augeas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.0-3.17.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"augeas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.0-3.17.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"augeas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.0-3.21.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"augeas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.0-3.21.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"augeas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.0-3.21.3.1"}]}],"bundled":2}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"netcf_project","product":"netcf"},{"vendor":"redhat","product":"enterprise_linux"}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157508.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Issue Tracking","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1172176","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://pagure.io/netcf/blob/050b05c880a6b343baf86780d94764b1aafece37/f/NEWS","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Release Notes","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156571.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Issue Tracking","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157713.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Issue Tracking","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-2248.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Issue Tracking","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/78046","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8119","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-rqwf-j354-5q38"},{"url":"https://access.redhat.com/errata/RHBA-2015:1307","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1113978","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1116314","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1208894","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1208897","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhba-2015_1307.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8119","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8119","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:2248","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=761246","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1090011","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1113983","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1159000","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1170941","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1206680","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2248.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151249-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/925225","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8119","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151792-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180653-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1054171","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7555","tags":["web"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2014-8119","description":"The find_ifcfg_path function in netcf before 0.2.7 might allow attackers to cause a denial of service (application crash) via vectors involving augeas path expressions.","status":"published","published":"2017-12-29T22:00:00Z","modified":"2024-08-06T13:10:50.759Z","updated_at":"2026-11-02T14:33:43.206348Z"}],"euvd":[{"id":"EUVD-2014-7964","description":"The find_ifcfg_path function in netcf before 0.2.7 might allow attackers to cause a denial of service (application crash) via vectors involving augeas path expressions.","status":"published","published":"2017-12-29T22:00:00Z","modified":"2024-08-06T13:10:50Z","updated_at":"2026-11-03T01:56:52.951821Z"}],"ghsa":[{"id":"GHSA-rqwf-j354-5q38","title":"The find_ifcfg_path function in netcf before 0.2.7 might allow attackers to cause a denial of...","description":"The find_ifcfg_path function in netcf before 0.2.7 might allow attackers to cause a denial of service (application crash) via vectors involving augeas path expressions.","status":"published","published":"2022-05-14T01:08:47Z","modified":"2023-02-02T05:03:07Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:51:34.49846Z"}],"nvd":[{"id":"CVE-2014-8119","description":"The find_ifcfg_path function in netcf before 0.2.7 might allow attackers to cause a denial of service (application crash) via vectors involving augeas path expressions.","status":"published","published":"2017-12-29T22:29:00.473Z","modified":"2026-06-17T00:16:18.933Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:02:59.001778Z"}],"osv":[{"id":"openSUSE-SU-2024:10641-1","title":"augeas-1.12.0-4.2 on GA media","description":"These are all security issues fixed in the augeas-1.12.0-4.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:15:34.981524Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"RHBA-2015:1307","title":"Red Hat Bug Fix Advisory: netcf bug fix update","status":"published","published":"2024-09-15T22:20:05Z","modified":"2026-06-26T10:26:02Z","updated_at":"2026-11-02T15:52:58.117212Z"},{"id":"RHSA-2015:2248","title":"Red Hat Security Advisory: netcf security, bug fix, and enhancement update","status":"published","published":"2024-09-15T22:20:10Z","modified":"2026-06-26T10:28:56Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"SUSE-SU-2015:1249-1","title":"Security update for augeas","description":"\nThis update fixes an untrusted argument escaping problem (CVE-2014-8119):\n\n* new API - aug_escape_name() - which can be used to escape\n  untrusted inputs before using them as part of path expressions\n* aug_match() is changed to return properly escaped output\n","status":"published","published":"2015-06-24T07:08:14Z","modified":"2026-02-04T03:23:08.929312Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:1792-1","title":"Security update for augeas","description":"\nThis update fixes an untrusted argument escaping problem (CVE-2014-8119):\n\n* new API - aug_escape_name() - which can be used to escape\n  untrusted inputs before using them as part of path expressions\n* aug_match() is changed to return properly escaped output\n","status":"published","published":"2015-10-09T12:26:33Z","modified":"2026-02-04T04:32:16.678451Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2018:0653-1","title":"Security update for augeas","description":"This update for augeas fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2017-7555: Fix a memory corruption bug could have lead to arbitrary code execution\n  by passing crafted strings that would be mis-handled by parse_name() (bsc#1054171).\n- CVE-2014-8119: Fix improper handling of escaped strings leading to memory corruption (bsc#925225).\n","status":"published","published":"2018-03-09T13:07:14Z","modified":"2026-02-04T02:44:26.876812Z","updated_at":"2026-11-02T15:53:44.594517Z"}]}}