Published: 15/07/2014 Updated: 29/08/2017

CVSS v2 Base Score: 4.9 | Impact Score: 6.9 | Exploitability Score: 3.9

VMScore: 436

Vector: AV:L/AC:L/Au:N/C:C/I:N/A:N

FreeBSD 8.4 before p14, 9.1 before p17, 9.2 before p10, and 10.0 before p7 does not properly initialize the buffer between the header and data of a control message, which allows local users to obtain sensitive information from kernel memory via unspecified vectors.

Vulnerable Product	Search on Vulmon	Subscribe to Product
freebsd freebsd 9.1
freebsd freebsd 8.4
freebsd freebsd 10.0
freebsd freebsd 9.2

Debian Bug report logs - #766275 kfreebsd-9: CVE-2014-3711: memory leak in sandboxed namei lookup Package: src:kfreebsd-9; Maintainer for src:kfreebsd-9 is (unknown); Reported by: Steven Chamberlain <steven@pyroeuorg> Date: Tue, 21 Oct 2014 21:33:01 UTC Severity: important Tags: patch, security, upstream Found in versio ...

Debian Bug report logs - #754236 kfreebsd-9: sockbuf CMSG kernel memory disclosure (CVE-2014-3952) Package: src:kfreebsd-9; Maintainer for src:kfreebsd-9 is (unknown); Reported by: Steven Chamberlain <steven@pyroeuorg> Date: Tue, 8 Jul 2014 22:45:01 UTC Severity: important Tags: security, upstream Found in versions kfr ...

Several vulnerabilities have been discovered in the FreeBSD kernel that may lead to a denial of service or information disclosure CVE-2014-3711 Denial of service through memory leak in sandboxed namei lookups CVE-2014-3952 Kernel memory disclosure in sockbuf control messages CVE-2014-3953 Kernel memory disclosure in SCTP This updat ...

CWE-119 http://www.securityfocus.com/bid/68466 http://www.freebsd.org/security/advisories/FreeBSD-SA-14:17.kmem.asc http://www.securitytracker.com/id/1030539 http://www.debian.org/security/2014/dsa-3070 http://secunia.com/advisories/62218 https://exchange.xforce.ibmcloud.com/vulnerabilities/94448 https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=766275 https://www.debian.org/security/./dsa-3070

CVE-2014-3952

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect