{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "title": "possible denial of service",
    "tracking": {
      "current_release_date": "2026-08-11T14:01:50+00:00",
      "generator": {
        "date": "2026-08-11T14:01:50+00:00",
        "engine": {
          "name": "CSAF Generator",
          "version": "3.3.0"
        }
      },
      "id": "CVE-2014-7204",
      "initial_release_date": "2014-03-25T00:00:00+00:00",
      "revision_history": [
        {
          "date": "2026-08-11T14:01:50+00:00",
          "number": "1",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "category": "vendor",
        "name": "Red Hat",
        "branches": [
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 5.11",
            "product": {
              "name": "Red Hat Enterprise Linux 5.11",
              "product_id": "rhel-5.11.z.els",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:rhel_els:5"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 6-els",
            "product": {
              "name": "Red Hat Enterprise Linux 6-els",
              "product_id": "rhel-6-els.els",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:rhel_els:6"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 7-els",
            "product": {
              "name": "Red Hat Enterprise Linux 7-els",
              "product_id": "rhel-7-els.els",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:rhel_els:7"
              }
            }
          },
          {
            "category": "product_version",
            "name": "ctags",
            "product": {
              "name": "ctags",
              "product_id": "ctags",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/ctags"
              }
            }
          },
          {
            "category": "product_version",
            "name": "ctags-debuginfo",
            "product": {
              "name": "ctags-debuginfo",
              "product_id": "ctags-debuginfo",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/ctags-debuginfo"
              }
            }
          },
          {
            "category": "product_version",
            "name": "ctags-etags",
            "product": {
              "name": "ctags-etags",
              "product_id": "ctags-etags",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/ctags-etags"
              }
            }
          },
          {
            "category": "product_version",
            "name": "ctags",
            "product": {
              "name": "ctags",
              "product_id": "ctags.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/ctags?arch=src"
              }
            }
          }
        ]
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ctags as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:ctags"
        },
        "product_reference": "ctags",
        "relates_to_product_reference": "rhel-6-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ctags as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:ctags"
        },
        "product_reference": "ctags",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ctags-debuginfo as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:ctags-debuginfo"
        },
        "product_reference": "ctags-debuginfo",
        "relates_to_product_reference": "rhel-6-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ctags-debuginfo as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:ctags-debuginfo"
        },
        "product_reference": "ctags-debuginfo",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ctags-etags as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:ctags-etags"
        },
        "product_reference": "ctags-etags",
        "relates_to_product_reference": "rhel-6-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ctags-etags as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:ctags-etags"
        },
        "product_reference": "ctags-etags",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ctags.src as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:ctags.src"
        },
        "product_reference": "ctags.src",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ctags.src as a component of Red Hat Enterprise Linux 5.11",
          "product_id": "rhel-5.11.z.els:ctags.src"
        },
        "product_reference": "ctags.src",
        "relates_to_product_reference": "rhel-5.11.z.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ctags.src as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:ctags.src"
        },
        "product_reference": "ctags.src",
        "relates_to_product_reference": "rhel-6-els.els"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2014-7204",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2014-03-25T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "rhel-6-els.els:ctags-debuginfo",
            "rhel-7-els.els:ctags-debuginfo"
          ]
        }
      ],
      "notes": [
        {
          "category": "other",
          "text": "Red Hat Product Security has rated this issue as having Moderate security impact. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.",
          "title": "Statement"
        },
        {
          "category": "description",
          "text": "jscript.c in Exuberant Ctags 5.8 allows remote attackers to cause a denial of service (infinite loop and CPU and disk consumption) via a crafted JavaScript file.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "known_affected": [
          "rhel-5.11.z.els:ctags.src",
          "rhel-6-els.els:ctags",
          "rhel-6-els.els:ctags-etags",
          "rhel-6-els.els:ctags.src",
          "rhel-7-els.els:ctags",
          "rhel-7-els.els:ctags-etags",
          "rhel-7-els.els:ctags.src"
        ],
        "known_not_affected": [
          "rhel-6-els.els:ctags-debuginfo",
          "rhel-7-els.els:ctags-debuginfo"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-7204"
        },
        {
          "category": "external",
          "summary": "nvd.nist.gov",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7204"
        },
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-7204"
        }
      ],
      "remediations": [
        {
          "category": "no_fix_planned",
          "details": "Will not fix",
          "product_ids": [
            "rhel-5.11.z.els:ctags.src",
            "rhel-6-els.els:ctags",
            "rhel-6-els.els:ctags-etags",
            "rhel-6-els.els:ctags.src",
            "rhel-7-els.els:ctags",
            "rhel-7-els.els:ctags-etags",
            "rhel-7-els.els:ctags.src"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "version": "2.0",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore": 4.3
          },
          "products": [
            "rhel-5.11.z.els:ctags.src",
            "rhel-6-els.els:ctags",
            "rhel-6-els.els:ctags-debuginfo",
            "rhel-6-els.els:ctags-etags",
            "rhel-6-els.els:ctags.src",
            "rhel-7-els.els:ctags",
            "rhel-7-els.els:ctags-debuginfo",
            "rhel-7-els.els:ctags-etags",
            "rhel-7-els.els:ctags.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate",
          "product_ids": [
            "rhel-5.11.z.els:ctags.src",
            "rhel-6-els.els:ctags",
            "rhel-6-els.els:ctags-debuginfo",
            "rhel-6-els.els:ctags-etags",
            "rhel-6-els.els:ctags.src",
            "rhel-7-els.els:ctags",
            "rhel-7-els.els:ctags-debuginfo",
            "rhel-7-els.els:ctags-etags",
            "rhel-7-els.els:ctags.src"
          ]
        }
      ],
      "title": "possible denial of service"
    }
  ]
}