NVD

Id
29817  
Name
CVE-2014-0998  
Description
Integer signedness error in the vt console driver (formerly Newcons) in FreeBSD 9.3 before p10 and 10.1 before p6 allows local users to cause a denial of service (crash) and possibly gain privileges via a negative value in a VT_WAITACTIVE ioctl call, which triggers an array index error and out-of-bounds kernel memory access.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-02-02  
Modified Date
2015-04-13  
Seq
2014-0998  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
157439 29817 CVE-2014-0998 20150127 [CORE-2015-0003] - FreeBSD Kernel Multiple Vulnerabilities  View
157440 29817 CVE-2014-0998 http://www.coresecurity.com/advisories/freebsd-kernel-multiple-vulnerabilities  View
157441 29817 CVE-2014-0998 20150127 [CORE-2015-0003] - FreeBSD Kernel Multiple Vulnerabilities  View
157442 29817 CVE-2014-0998 FreeBSD-EN-15:01  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
18955 JVNDB-2014-007830 FreeBSD の vt コンソールドライバにおける整数符号エラーの脆弱性 FreeBSD の vt コンソールドライバ (旧 Newcons) には、整数符号エラーの脆弱性が存在します。 CVE-2014-0998 68399 CVE-2014-0998 29817 7.2 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007830.html 2014-01-07 2015-02-13 View