CVE-2014-3661
Published:October 16, 2014
Updated:May 17, 2026
Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to cause a denial of service (thread consumption) via vectors related to a CLI handshake.
Affected Packages
org.jenkins-ci.main:jenkins-core (JAVA):
Affected version(s) >=1.566 <1.583Fix Suggestion:
Update to version 1.583org.jenkins-ci.main:jenkins-core (JAVA):
Affected version(s) >=1.396 <1.565.3Fix Suggestion:
Update to version 1.565.3Related Resources (6)
Do you need more information?
Contact UsCVSS v3
Base Score:
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
LOW
CVSS v2
Base Score:
5
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
EPSS
Base Score:
0.16