CVE-2014-3661
medium
CVSS 5.0
EPSS 1.8%
Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to cause a denial of service (thread consumption) via vectors related to a CLI handshake.
Versions it affects
Software versions checked with the free lookup that CVE-2014-3661 applies to, and the release that fixes it where the sources name one.
At a glance
- Severity
- Medium
- CVSS base score
- 5.0 out of 10
- Known exploited
- Not in CISA's catalogue of exploited vulnerabilities
- EPSS
- 1.8% probability of exploitation in the next 30 days, higher than 78% of scored vulnerabilities
- Weakness
- CWE-399
- Published
- 2014-10-16
Is this running somewhere in your estate?
The Vulnerability Reporter inventories every machine and tells you when an advisory like this one applies to you.