CVE-2014-2532

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

• ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
• AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
• Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

4.75% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 91.1% of scored records. A rank, not a probability.

NVD base score

4.9 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N

NVD analysis status

Modified. NVD last modified this record on 2026-06-17.

Red Hat severity

Low. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

Published

2014-03-18 01:00Z12 YR AGO

Last updated

2026-05-28 17:41Z3 MO AGO

Reserved

2014-03-17

Assigning CNA

mitre

Record state

PUBLISHED

Severity

Medium (CVSS 4.2)

CNA CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N

Weaknesses

• CWE-20Improper Input ValidationClass
• CWE-266Incorrect Privilege AssignmentBase
• CWE-264
• CWE-138Improper Neutralization of Special ElementsClass

Data version

5.2

Document digest

739d30c51311a2ffdf35b16947b96a7b9dc8ea3ca4324d8034650fde55ea81bd

• www.oracle.comhttp://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.htmlx_refsource_CONFIRM
• secunia.com59855http://secunia.com/advisories/59855third-party-advisoryx_refsource_SECUNIA
• secunia.com57574http://secunia.com/advisories/57574third-party-advisoryx_refsource_SECUNIA
• advisories.mageia.orghttp://advisories.mageia.org/MGASA-2014-0143.htmlx_refsource_CONFIRM
• lists.apple.comAPPLE-SA-2015-09-30-3http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.htmlvendor-advisoryx_refsource_APPLE
• marc.infoHPSBUX03188http://marc.info/?l=bugtraq&m=141576985122836&w=2vendor-advisoryx_refsource_HP
• secunia.com57488http://secunia.com/advisories/57488third-party-advisoryx_refsource_SECUNIA
• www.mandriva.comMDVSA-2015:095http://www.mandriva.com/security/advisories?name=MDVSA-2015:095vendor-advisoryx_refsource_MANDRIVA
• www.oracle.comhttp://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.htmlx_refsource_CONFIRM
• secunia.com59313http://secunia.com/advisories/59313third-party-advisoryx_refsource_SECUNIA
• support.apple.comhttps://support.apple.com/HT205267x_refsource_CONFIRM
• lists.fedoraproject.orgFEDORA-2014-6380http://lists.fedoraproject.org/pipermail/package-announce/2014-May/133537.htmlvendor-advisoryx_refsource_FEDORA
• www.debian.orgDSA-2894http://www.debian.org/security/2014/dsa-2894vendor-advisoryx_refsource_DEBIAN
• rhn.redhat.comRHSA-2014:1552http://rhn.redhat.com/errata/RHSA-2014-1552.htmlvendor-advisoryx_refsource_REDHAT
• aix.software.ibm.comhttp://aix.software.ibm.com/aix/efixes/security/openssh_advisory4.ascx_refsource_CONFIRM
• www.securitytracker.com1029925http://www.securitytracker.com/id/1029925vdb-entryx_refsource_SECTRACK
• marc.info[security-announce] 20140315 Announce: OpenSSH 6.6 releasedhttp://marc.info/?l=openbsd-security-announce&m=139492048027313&w=2mailing-listx_refsource_MLIST
• www.oracle.comhttp://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.htmlx_refsource_CONFIRM
• www.ubuntu.comUSN-2155-1http://www.ubuntu.com/usn/USN-2155-1vendor-advisoryx_refsource_UBUNTU
• lists.fedoraproject.orgFEDORA-2014-6569http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134026.htmlvendor-advisoryx_refsource_FEDORA
• exchange.xforce.ibmcloud.comopenssh-cve20142532-sec-bypass(91986)https://exchange.xforce.ibmcloud.com/vulnerabilities/91986vdb-entryx_refsource_XF
• www.mandriva.comMDVSA-2014:068http://www.mandriva.com/security/advisories?name=MDVSA-2014:068vendor-advisoryx_refsource_MANDRIVA
• www.securityfocus.com66355http://www.securityfocus.com/bid/66355vdb-entryx_refsource_BID