CVE-2014-3712

CVE-2014-3712 describes a denial-of-service vulnerability in Katello, affecting its content_search_controller.rb and api_controller.rb components. This flaw allows remote attackers to trigger excessive memory consumption by manipulating the 'mode' or 'action' parameters, which are then passed to the to_sym method. With a CVSS score of 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P), this vulnerability is of medium severity, indicating it can be exploited remotely with low complexity and without authentication, leading to a partial denial of service. There is no evidence of active exploitation, publicly available exploit code in Metasploit, Nuclei, or ExploitDB, and it has garnered minimal community discussion or media coverage.