CVEvulnerability
CVE-2014-3953
4.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-07-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.9 MEDIUM — AV:L/AC:L/Au:N/C:C/I:N/A:N
- Weaknesses
- CWE-119
Description
FreeBSD 8.4 before p14, 9.1 before p17, 9.2 before p10, and 10.0 before p7 does not properly initialize certain data structures, which allows local users to obtain sensitive information from kernel memory via a (1) SCTP_SNDRCV, (2) SCTP_EXTRCV, or (3) SCTP_RCVINFO SCTP cmsg or a (4) SCTP_PEER_ADDR_CHANGE, (5) SCTP_REMOTE_ERROR, or (6) SCTP_AUTHENTICATION_EVENT notification.
Affected configurations
• freebsd freebsd 8.4
• freebsd freebsd 9.1
• freebsd freebsd 9.2
• freebsd freebsd 10.0
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://secunia.com/advisories/62218 secunia.com
- http://www.debian.org/security/2014/dsa-3070 www.debian.org
- http://www.freebsd.org/security/advisories/FreeBSD-SA-14:17.kmem.asc Vendor Advisory
- http://www.securitytracker.com/id/1030539 www.securitytracker.com
- http://secunia.com/advisories/62218 secunia.com
- http://www.debian.org/security/2014/dsa-3070 www.debian.org
- http://www.freebsd.org/security/advisories/FreeBSD-SA-14:17.kmem.asc Vendor Advisory
- http://www.securitytracker.com/id/1030539 www.securitytracker.com