CVE

Id
75776  
CVE No.
CVE-2014-8475  
Status
Candidate  
Description
FreeBSD 9.1, 9.2, and 10.0, when compiling OpenSSH with Kerberos support, uses incorrect library ordering when linking sshd, which causes symbols to be resolved incorrectly and allows remote attackers to cause a denial of service (sshd deadlock and prevention of new connections) by ending multiple connections before authentication is completed.  
Phase
Assigned (20141024)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
700700 75776 CVE-2014-8475 MISC:http://packetstormsecurity.com/files/128972/FreeBSD-Security-Advisory-sshd-Denial-Of-Service.html  View
700701 75776 CVE-2014-8475 FREEBSD:FreeBSD-SA-14:24  View
700702 75776 CVE-2014-8475 URL:https://www.freebsd.org/security/advisories/FreeBSD-SA-14%3A24.sshd.asc  View
700703 75776 CVE-2014-8475 BID:70913  View
700704 75776 CVE-2014-8475 URL:http://www.securityfocus.com/bid/70913  View
700705 75776 CVE-2014-8475 SECTRACK:1031168  View
700706 75776 CVE-2014-8475 URL:http://www.securitytracker.com/id/1031168  View
700707 75776 CVE-2014-8475 SECUNIA:61440  View
700708 75776 CVE-2014-8475 URL:http://secunia.com/advisories/61440  View
700709 75776 CVE-2014-8475 XF:freebsd-cve20148475-dos(98491)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
16385 JVNDB-2014-005260 Quassel IRC の core/cipher.cpp の blowfishECB 関数におけるサービス運用妨害 (DoS) の脆弱性 Quassel IRC の core/cipher.cpp の blowfishECB 関数には、サービス運用妨害 (out-of-bounds read) 状態にされる脆弱性が存在します。 CVE-2014-8483 75776 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005260.html  View