CVE-2014-2537: Sophos Unified Threat Management

High severity, CVSS 7.8. EPSS: 3.1% chance of exploitation in the next 30 days.

Memory leak in the TCP stack in the kernel in Sophos UTM before 9.109 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors.

Affected products

• Sophos Unified Threat Management
• Sophos Unified Threat Management Software: up to and including 9.108; version 8.3 only; version 9.007 only; version 9.107 only

Published 2014-03-18. Last modified 2026-06-17.