CVE-2014-7266

Name of the Vulnerable Software and Affected Versions Cybozu Remote Service Manager versions 2.3.0 and earlier Cybozu Remote Service Manager versions 3.x through 3.1.2

Description The issue allows remote attackers to cause a denial of service, specifically CPU consumption, by triggering colliding hash-table keys. This problem exists due to an incomplete fix for a previous issue.

Recommendations For Cybozu Remote Service Manager versions 2.3.0 and earlier, update to a version later than 2.3.0 to resolve the issue. For Cybozu Remote Service Manager versions 3.x through 3.1.2, update to a version later than 3.1.2 to resolve the issue. As a temporary workaround, consider restricting access to the service to minimize the risk of exploitation.