CVE-2014-125056 - CVE House
Back to Database
Status published Low CVE-2014-125056

Pylons horus services.py timing discrepancy

Vulnerability Description

A vulnerability was found in Pylons horus and classified as problematic. Affected by this issue is some unknown functionality of the file horus/flows/local/services.py. The manipulation leads to observable timing discrepancy. The complexity of an attack is rather high. The exploitation is known to be difficult. The patch is identified as fd56ccb62ce3cbdab0484fe4f9c25c4eda6c57ec. It is recommended to apply a patch to fix this issue. VDB-217598 is the identifier assigned to this vulnerability.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-125056

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • VulDB GitHub Commit Analyzer

References

More from Pylons

View All →
CVE-2024-49769
Waitress has a denial of service leading to high CPU usage/resource exhaustion
High 7.5
CVE-2024-49768
Waitress has request processing race condition in HTTP pipelining with invalid first request
Critical 9.1
CVE-2024-42353
WebOb's location header normalization during redirect leads to open redirect
Medium 6.1
CVE-2023-40587
Pyramid static view path traversal up one directory
Medium 4.3
CVE-2022-31015
Uncaught Exception (due to a data race) leads to process termination in Waitress
Medium 6.5

Affected Vendor

Affected Software

horus
Vulnerable Versions:
Unknown

Timeline

Official Publish: January 7th, 2023
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

Weaknesses (CWE)

CWE-208

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.