CVE-2014-3953

FreeBSD 8.4 before p14, 9.1 before p17, 9.2 before p10, and 10.0 before p7 does not properly initialize certain data structures, which allows local users to obtain sensitive information from kernel memory via a (1) SCTP_SNDRCV, (2) SCTP_EXTRCV, or (3) SCTP_RCVINFO SCTP cmsg or a (4) SCTP_PEER_ADDR_CHANGE, (5) SCTP_REMOTE_ERROR, or (6) SCTP_AUTHENTICATION_EVENT notification.

CVSS v2.0 4.9 MEDIUM

4.9^/10

CVSS v2.0 : MEDIUM

Vector : AV:L/AC:L/Au:N/C:C/I:N/A:N

Exploitability : 3.9 / Impact : 6.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://secunia.com/advisories/62218
http://www.debian.org/security/2014/dsa-3070
http://www.freebsd.org/security/advisories/FreeBSD-SA-14:17.kmem.asc	Vendor Advisory
http://www.securitytracker.com/id/1030539
http://secunia.com/advisories/62218
http://www.debian.org/security/2014/dsa-3070
http://www.freebsd.org/security/advisories/FreeBSD-SA-14:17.kmem.asc	Vendor Advisory
http://www.securitytracker.com/id/1030539

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:freebsd:freebsd:8.4:::::::*
	cpe:2.3:o:freebsd:freebsd:9.1:::::::*
	cpe:2.3:o:freebsd:freebsd:9.2:-::::::
	cpe:2.3:o:freebsd:freebsd:10.0:::::::*

History

21 Nov 2024, 02:09

Type	Values Removed	Values Added
References	~~() http://secunia.com/advisories/62218 -~~	() http://secunia.com/advisories/62218 -
References	~~() http://www.debian.org/security/2014/dsa-3070 -~~	() http://www.debian.org/security/2014/dsa-3070 -
References	~~() http://www.freebsd.org/security/advisories/FreeBSD-SA-14:17.kmem.asc - Vendor Advisory~~	() http://www.freebsd.org/security/advisories/FreeBSD-SA-14:17.kmem.asc - Vendor Advisory
References	~~() http://www.securitytracker.com/id/1030539 -~~	() http://www.securitytracker.com/id/1030539 -

Information

Published : 2014-07-15 14:55

Updated : 2024-11-21 02:09

NVD link : CVE-2014-3953

Mitre link : CVE-2014-3953

CVE.ORG link : CVE-2014-3953

JSON object : View

Products Affected

freebsd

freebsd

CWE

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

{"id": "CVE-2014-3953", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.9, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2014-07-15T14:55:09.840", "references": [{"url": "http://secunia.com/advisories/62218", "source": "cve@mitre.org"}, {"url": "http://www.debian.org/security/2014/dsa-3070", "source": "cve@mitre.org"}, {"url": "http://www.freebsd.org/security/advisories/FreeBSD-SA-14:17.kmem.asc", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securitytracker.com/id/1030539", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/62218", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.debian.org/security/2014/dsa-3070", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.freebsd.org/security/advisories/FreeBSD-SA-14:17.kmem.asc", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securitytracker.com/id/1030539", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-119"}]}], "descriptions": [{"lang": "en", "value": "FreeBSD 8.4 before p14, 9.1 before p17, 9.2 before p10, and 10.0 before p7 does not properly initialize certain data structures, which allows local users to obtain sensitive information from kernel memory via a (1) SCTP_SNDRCV, (2) SCTP_EXTRCV, or (3) SCTP_RCVINFO SCTP cmsg or a (4) SCTP_PEER_ADDR_CHANGE, (5) SCTP_REMOTE_ERROR, or (6) SCTP_AUTHENTICATION_EVENT notification."}, {"lang": "es", "value": "FreeBSD 8.4 anterior a p14, 9.1 anterior a p17, 9.2 anterior a p10 y 10.0 anterior a p7 no inicializa debidamente ciertas estructuras de datos, lo que permite a usuarios locales obtener informaci\u00f3n sensible de la memoria del kernel a trav\u00e9s de un cmsg (1) SCTP_SNDRCV, (2) SCTP_EXTRCV o (3) SCTP_RCVINFO SCTP o una notificaci\u00f3n (4) SCTP_PEER_ADDR_CHANGE, (5) SCTP_REMOTE_ERROR o (6) SCTP_AUTHENTICATION_EVENT."}], "lastModified": "2024-11-21T02:09:12.623", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:freebsd:freebsd:8.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5DB4C0E8-8E50-44B1-BE0C-4C261D9E9730"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:9.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D78E559A-430D-4D50-8A83-58A37D393471"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:9.2:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F377F93B-93E0-423C-BED2-35D5A01ED52C"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:10.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CA79CE41-D873-4A4A-A20C-83EB8772E5FA"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}