Lucene search
HistoryOct 27, 2014 - 3:55 p.m.
CVE-2014-3711
cve-2014-3711
freebsd
namei
denial of service
memory exhaustion
nvd
vulnerability
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.3 Medium
AI Score
Confidence
Low
0.009 Low
EPSS
Percentile
83.0%
namei in FreeBSD 9.1 through 10.1-RC2 allows remote attackers to cause a denial of service (memory exhaustion) via vectors that trigger a sandboxed process to look up a large number of nonexistent path names.
Affected configurations
Node
freebsdfreebsdMatch9.1
ORfreebsdfreebsdMatch9.1p4
ORfreebsdfreebsdMatch9.1p5
ORfreebsdfreebsdMatch9.2-
ORfreebsdfreebsdMatch9.2prerelease
ORfreebsdfreebsdMatch9.2rc1
ORfreebsdfreebsdMatch9.2rc2
ORfreebsdfreebsdMatch9.3
ORfreebsdfreebsdMatch9.3rc1
ORfreebsdfreebsdMatch9.3rc2
ORfreebsdfreebsdMatch10.0
ORfreebsdfreebsdMatch10.0rc1
ORfreebsdfreebsdMatch10.0rc2
ORfreebsdfreebsdMatch10.1
ORfreebsdfreebsdMatch10.1rc1
ORfreebsdfreebsdMatch10.1rc2
| CPE | Name | Operator | Version |
|---|---|---|---|
| freebsd:freebsd | freebsd | eq | 9.1 |
| freebsd:freebsd | freebsd | eq | 9.2 |
| freebsd:freebsd | freebsd | eq | 9.3 |
| freebsd:freebsd | freebsd | eq | 10.0 |
| freebsd:freebsd | freebsd | eq | 10.1 |
Related
securityvulns
securityvulns
FreeBSD Security Advisory FreeBSD-SA-14:22.namei
2014-10-27 00:00:00
FreeBSD namei information leakage
2014-10-27 00:00:00
debiancve
debiancve
CVE-2014-3711
2014-10-27 15:55:24
freebsd_advisory
freebsd_advisory
FreeBSD-SA-14:22.namei
2014-10-21 00:00:00
cvelist
cvelist
CVE-2014-3711
2014-10-27 15:00:00
nvd
nvd
CVE-2014-3711
2014-10-27 15:55:24
prion
prion
Design/Logic Flaw
2014-10-27 15:55:00
nessus
nessus
FreeBSD : FreeBSD -- memory leak in sandboxed namei lookup (73964eac-6007-11e6-a6c3-14dae9d210b8)
2016-08-12 00:00:00
Debian DSA-3070-1 : kfreebsd-9 - security update
2014-11-10 00:00:00
freebsd
freebsd
FreeBSD -- memory leak in sandboxed namei lookup
2014-10-21 00:00:00
openvas
openvas
Debian Security Advisory DSA 3070-1 (kfreebsd-9 - security update)
2014-11-07 00:00:00
Debian: Security Advisory (DSA-3070-1)
2014-11-06 00:00:00
debian
debian
[SECURITY] [DSA 3070-1] kfreebsd-9 security update
2014-11-07 17:54:56
osv
osv
kfreebsd-9 - security update
2014-11-07 00:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.3 Medium
AI Score
Confidence
Low
0.009 Low
EPSS
Percentile
83.0%
Related for CVE-2014-3711