CVE-2014-2537

High

Published: 18/03/2014(UTC)Translated: 17/06/2026(UTC)NVD NIST

Summary

A memory leak in the TCP stack in the kernel in Sophos UTM before version 9.109 allows remote attackers to cause a denial of service through unspecified vectors.

Risk Assessment

Attackers can exploit this vulnerability to exhaust memory resources, leading to service unavailability for users.

Recommendation

It is recommended to update the system to version 9.109 or later to mitigate this vulnerability.

Other vulnerabilities in Sophos UTM

CVE-2026-118633High
A path traversal vulnerability allows a remote unauthenticated attacker to execute arbitrary code as root in Sophos UTM (all versions) after winning a race condition by sustaining repeated attacks for a few minutes when the email proxy is used with scanning enabled. Sophos UTM is end-of-life and the patch must be installed manually.

Original NVD description (English source)

Memory leak in the TCP stack in the kernel in Sophos UTM before 9.109 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS