CVE-2014-0086
redhat: no CVSS score yet. EPSS 1.5% chance of exploitation in the next 30 days. Fixed in org.richfaces:richfaces 5.0.0.Alpha3.
The doFilter function in webapp/PushHandlerFilter.java in JBoss RichFaces 4.3.4, 4.3.5, and 5.x allows remote attackers to cause a denial of service (memory consumption and out-of-memory error) via a large number of malformed atmosphere push requests.
- EPSS
- 1.5% chance of exploitation in the next 30 days; higher than 73% of CVEs (scores of 2026-10-31)
- CWE
- CWE-20
- Published
- Modified
- Record from
- the NVD, synced
Affected
- redhat:jboss_web_framework_kit
- redhat:richfaces
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-xfxv-f945-4qv6 | Maven | org.richfaces:richfaces | >=4.3.4 <=4.3.5 | no fix published |
| GHSA-xfxv-f945-4qv6 | Maven | org.richfaces:richfaces | >=5.0.0.Alpha1 <5.0.0.Alpha3 | 5.0.0.Alpha3 |