CVE-2014-3880

The (1) execve and (2) fexecve system calls in the FreeBSD kernel 8.4 before p11, 9.1 before p14, 9.2 before p7, and 10.0 before p4 destroys the virtual memory address space and mappings for a process before all threads have terminated, which allows local users to cause a denial of service (triple-fault and system reboot) via a crafted system call, which triggers an invalid page table pointer dereference.

CVSS v2.0 4.9 MEDIUM

4.9^/10

CVSS v2.0 : MEDIUM

Vector : AV:L/AC:L/Au:N/C:N/I:N/A:C

Exploitability : 3.9 / Impact : 6.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

References

Link	Resource
http://secunia.com/advisories/59034
http://www.debian.org/security/2014/dsa-2952
http://www.freebsd.org/security/advisories/FreeBSD-EN-14%3A06.exec.asc	Vendor Advisory
http://secunia.com/advisories/59034
http://www.debian.org/security/2014/dsa-2952
http://www.freebsd.org/security/advisories/FreeBSD-EN-14%3A06.exec.asc	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:freebsd:freebsd:8.4:::::::*
	cpe:2.3:o:freebsd:freebsd:9.1:::::::*
	cpe:2.3:o:freebsd:freebsd:9.2:-::::::
	cpe:2.3:o:freebsd:freebsd:10.0:::::::*

History

21 Nov 2024, 02:09

Type	Values Removed	Values Added
References	~~() http://secunia.com/advisories/59034 -~~	() http://secunia.com/advisories/59034 -
References	~~() http://www.debian.org/security/2014/dsa-2952 -~~	() http://www.debian.org/security/2014/dsa-2952 -
References	~~() http://www.freebsd.org/security/advisories/FreeBSD-EN-14%3A06.exec.asc - Vendor Advisory~~	() http://www.freebsd.org/security/advisories/FreeBSD-EN-14%3A06.exec.asc - Vendor Advisory

Information

Published : 2014-06-10 14:55

Updated : 2024-11-21 02:09

NVD link : CVE-2014-3880

Mitre link : CVE-2014-3880

CVE.ORG link : CVE-2014-3880

JSON object : View

Products Affected

freebsd

freebsd

CWE

CWE-20

Improper Input Validation

{"id": "CVE-2014-3880", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.9, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:C", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2014-06-10T14:55:10.477", "references": [{"url": "http://secunia.com/advisories/59034", "source": "cve@mitre.org"}, {"url": "http://www.debian.org/security/2014/dsa-2952", "source": "cve@mitre.org"}, {"url": "http://www.freebsd.org/security/advisories/FreeBSD-EN-14%3A06.exec.asc", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/59034", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.debian.org/security/2014/dsa-2952", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.freebsd.org/security/advisories/FreeBSD-EN-14%3A06.exec.asc", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "The (1) execve and (2) fexecve system calls in the FreeBSD kernel 8.4 before p11, 9.1 before p14, 9.2 before p7, and 10.0 before p4 destroys the virtual memory address space and mappings for a process before all threads have terminated, which allows local users to cause a denial of service (triple-fault and system reboot) via a crafted system call, which triggers an invalid page table pointer dereference."}, {"lang": "es", "value": "Las llamadas de sistema (1) execve y (2) fexecve en el kernel de FreeBSD 8.4 anterior a p11, 9.1 anterior a p14, 9.2 anterior a p7 y 10.0 anterior a p4 destruye los espacios y asignaciones del espacio de direcciones de memoria virtual para un proceso antes de que todos los hilos hayan terminado, lo que permite a usuarios locales causar una denegaci\u00f3n de servicio (fallo triple y reinicio de sistema) a trav\u00e9s de una llamada de sistema manipulada, lo que provoca una referencia a puntero de tabla de p\u00e1gina inv\u00e1lida."}], "lastModified": "2024-11-21T02:09:03.010", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:freebsd:freebsd:8.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5DB4C0E8-8E50-44B1-BE0C-4C261D9E9730"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:9.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D78E559A-430D-4D50-8A83-58A37D393471"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:9.2:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F377F93B-93E0-423C-BED2-35D5A01ED52C"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:10.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CA79CE41-D873-4A4A-A20C-83EB8772E5FA"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}