Description
Apache Karaf before 4.0.10 enables a shutdown port on the loopback interface, which allows local users to cause a denial of service (shutdown) by sending a shutdown command to all listening high ports.
Remediation
References
https://bugzilla.redhat.com/show_bug.cgi?id=1095974
http://www.securityfocus.com/bid/101872
http://karaf.apache.org/security/cve-2014-0219.txt
Related Vulnerabilities
CVE-2019-19771 Vulnerability in npm package bictoind-rpc
CVE-2022-43424 Vulnerability in maven package com.compuware.jenkins:compuware-xpediter-code-coverage
CVE-2020-7238 Vulnerability in maven package io.netty:netty-all
CVE-2021-23673 Vulnerability in npm package pekeupload
CVE-2016-10551 Vulnerability in npm package waterline-sequel