NVD

Id
35508  
Name
CVE-2014-8475  
Description
FreeBSD 9.1, 9.2, and 10.0, when compiling OpenSSH with Kerberos support, uses incorrect library ordering when linking sshd, which causes symbols to be resolved incorrectly and allows remote attackers to cause a denial of service (sshd deadlock and prevention of new connections) by ending multiple connections before authentication is completed.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2014-11-18  
Modified Date
2017-01-06  
Seq
2014-8475  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
181844 35508 CVE-2014-8475 http://packetstormsecurity.com/files/128972/FreeBSD-Security-Advisory-sshd-Denial-Of-Service.html  View
181845 35508 CVE-2014-8475 70913  View
181846 35508 CVE-2014-8475 1031168  View
181847 35508 CVE-2014-8475 freebsd-cve20148475-dos(98491)  View
181848 35508 CVE-2014-8475 FreeBSD-SA-14:24  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16646 JVNDB-2014-005521 FreeBSD におけるサービス運用妨害 (DoS) の脆弱性 FreeBSD には、Kerberos サポートの OpenSSH をコンパイルする場合、sshd をリンクする際、誤ったライブラリ順序を使用するため、サービス運用妨害 (sshd のデッドロックおよび新しい接続の妨害) 状態にされる脆弱性が存在します。 CVE-2014-8475 75768 CVE-2014-8475 35508 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005521.html 2014-11-04 2014-11-19 View