CVE-2014-3711

namei in FreeBSD 9.1 through 10.1-RC2 allows remote attackers to cause a denial of service (memory exhaustion) via vectors that trigger a sandboxed process to look up a large number of nonexistent path names.
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:freebsd:freebsd:9.1:*:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:9.1:p4:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:9.1:p5:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:9.2:-:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:9.2:prerelease:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:9.2:rc1:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:9.2:rc2:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:9.3:*:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:9.3:rc1:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:9.3:rc2:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.0:*:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.0:rc1:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.0:rc2:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.1:*:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.1:rc1:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.1:rc2:*:*:*:*:*:*

History

21 Nov 2024, 02:08

Type Values Removed Values Added
References () http://secunia.com/advisories/62218 - () http://secunia.com/advisories/62218 -
References () http://www.debian.org/security/2014/dsa-3070 - () http://www.debian.org/security/2014/dsa-3070 -
References () http://www.securitytracker.com/id/1031100 - () http://www.securitytracker.com/id/1031100 -
References () https://www.freebsd.org/security/advisories/FreeBSD-SA-14:22.namei.asc - Patch () https://www.freebsd.org/security/advisories/FreeBSD-SA-14:22.namei.asc - Patch

Information

Published : 2014-10-27 15:55

Updated : 2024-11-21 02:08


NVD link : CVE-2014-3711

Mitre link : CVE-2014-3711

CVE.ORG link : CVE-2014-3711


JSON object : View

Products Affected

freebsd

  • freebsd
CWE
CWE-399

Resource Management Errors