Unscored severity · published Sep 10, 2014
CVE-2014-4068
The Response Group Service in Microsoft Lync Server 2010 and 2013 and the Core Components in Lync Server 2013 do not properly handle exceptions, which allows remote attackers to…
–
CVSS
19.7%
EPSS
No
On KEV
Description
The Response Group Service in Microsoft Lync Server 2010 and 2013 and the Core Components in Lync Server 2013 do not properly handle exceptions, which allows remote attackers to cause a denial of service (daemon hang) via a crafted call, aka "Lync Denial of Service Vulnerability."
Exploitation
Is it being used?
Exploit prediction (EPSS)19.7% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LS
Lync Server · Microsoft
2010; 2013 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-4068
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-4068
blogs.technet.com
http://blogs.technet.com/b/srd/archive/2014/09/09/assessing-risk-for-the-september-2014-security-updates.aspx
www.securityfocus.com
http://www.securityfocus.com/bid/69586
www.securitytracker.com
http://www.securitytracker.com/id/1030821
docs.microsoft.com
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-055
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/95544
More from Lync Server
7.2
CVE-2022-33633
Skype for Business and Lync Remote Code Execution Vulnerability
7.2
CVE-2021-26422
Skype for Business and Lync Remote Code Execution Vulnerability
6.5
CVE-2022-26911
Skype for Business Information Disclosure Vulnerability
6.5
CVE-2021-26421
Skype for Business and Lync Spoofing Vulnerability
6.5
CVE-2021-24099
Skype for Business and Lync Denial of Service Vulnerability