CVE

Id
76792  
CVE No.
CVE-2014-9491  
Status
Candidate  
Description
The devzvol_readdir function in illumos does not check the return value of a strchr call, which allows remote attackers to cause a denial of service (NULL pointer dereference and panic) via unspecified vectors.  
Phase
Assigned (20150103)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
705322 76792 CVE-2014-9491 MLIST:[oss-security] 20150103 Re: CVE Request for illumos distributions  View
705323 76792 CVE-2014-9491 URL:http://seclists.org/oss-sec/2015/q1/27  View
705324 76792 CVE-2014-9491 CONFIRM:https://github.com/illumos/illumos-gate/commit/d65686849024838243515b5c40ae2c479460b4b5  View
705325 76792 CVE-2014-9491 CONFIRM:https://www.illumos.org/issues/5421  View
705326 76792 CVE-2014-9491 XF:illumos-cve-20149491-dos(99686)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
18691 JVNDB-2014-007566 Drupal 用 Godwin"s Law モジュールにおけるクロスサイトスクリプティングの脆弱性 Drupa 用 Godwin"s Law モジュールには、dblog モジュールを使用する場合、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2014-9499 76792 3.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007566.html  View