CVE-2014-4768 Denial of service in n/a
Privileged remote attackers can cause a temporary denial of service on IBM x86 servers by enabling legacy boot mode via UEFI.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2014-4768?
CVE-2014-4768 is a low-severity denial of service vulnerability in n/a, published on 28 Jun 2015. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
IBM Unified Extensible Firmware Interface (UEFI) on Flex System x880 X6, System x3850 X6, and System x3950 X6 devices allows remote authenticated users to cause an unspecified temporary denial of service by using privileged access to enable a legacy boot mode.
Which versions are affected by CVE-2014-4768?
It affects 1 product.
Products include Ibm Uefi.
How do I fix CVE-2014-4768?
No fix has been published for CVE-2014-4768 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2014-4768 being exploited?
There is no known exploitation of CVE-2014-4768 in the wild and no public exploit code.
Sources
Also known as GHSA-55mm-gwv2-2mm5.