CVE-2014-4068 json
The Response Group Service in Microsoft Lync Server 2010 and 2013 and the Core Components in Lync Server 2013 do not properly handle except…
published 2014-09-10 12 y ago modified 2026-06-17 4 mo ago also EUVD-2014-3999
- cvss
- 5.0
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 19.7%
- EPSS 19.7% chance of exploitation in 30 days, percentile 97%
- public exploits
- 0
- none known
Summary
The Response Group Service in Microsoft Lync Server 2010 and 2013 and the Core Components in Lync Server 2013 do not properly handle exceptions, which allows remote attackers to cause a denial of service (daemon hang) via a crafted call, aka "Lync Denial of Service Vulnerability."
Exploit prediction
19.69% chance of exploitation in the next 30 days, higher than 97% of all scored CVEs (FIRST EPSS, 2026-11-09).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 5.0 | AV:N/AC:L/Au:N/C:N/I:N/A:P |
Classification
- Weakness
-
- CWE-20 Improper Input Validation
References
-
docs.microsoft.com
/en-us/security-updates/securitybulletins/2014/ms14-055
vendor-advisory
-
exchange.xforce.ibmcloud.com
/vulnerabilities/95544
vdb-entry
-
securitytracker.com
/id/1030821
vdb-entry
-
securityfocus.com
/bid/69586
vdb-entry
- blogs.technet.com /b/srd/archive/2014/09/09/assessing-risk-for-the-september-2014-security-updates.aspx
Sources
- CVE List CVE-2014-4068
- NVD CVE-2014-4068
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.