CVE-2014-3711

namei in FreeBSD 9.1 through 10.1-RC2 allows remote attackers to cause a denial of service (memory exhaustion) via vectors that trigger a sandboxed process to look up a large number of nonexistent path names.

Score

CVSS 2.0 5.0 Medium

Status

Modified - secalert@redhat.com

Published

2014-10-27

Last modified

2024-08-06

Weaknesses

CWE-399

Affected products

• Freebsd (Freebsd)

References

• http://secunia.com/advisories/62218
• http://www.debian.org/security/2014/dsa-3070
• http://www.securitytracker.com/id/1031100
• https://www.freebsd.org/security/advisories/FreeBSD-SA-14:22.namei.asc