NVD

Id
35618  
Name
CVE-2014-8612  
Description
Multiple array index errors in the Stream Control Transmission Protocol (SCTP) module in FreeBSD 10.1 before p5, 10.0 before p17, 9.3 before p9, and 8.4 before p23 allow local users to (1) gain privileges via the stream id to the setsockopt function, when setting the SCTIP_SS_VALUE option, or (2) read arbitrary kernel memory via the stream id to the getsockopt function, when getting the SCTP_SS_PRIORITY option.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-02-02  
Modified Date
2015-02-04  
Seq
2014-8612  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
182332 35618 CVE-2014-8612 20150127 [CORE-2015-0003] - FreeBSD Kernel Multiple Vulnerabilities  View
182333 35618 CVE-2014-8612 http://www.coresecurity.com/advisories/freebsd-kernel-multiple-vulnerabilities  View
182334 35618 CVE-2014-8612 20150127 [CORE-2015-0003] - FreeBSD Kernel Multiple Vulnerabilities  View
182335 35618 CVE-2014-8612 72342  View
182336 35618 CVE-2014-8612 1031648  View
182337 35618 CVE-2014-8612 FreeBSD-SA-15:02  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
18954 JVNDB-2014-007829 FreeBSD の Stream Control Transmission Protocol モジュールにおける権限を取得される脆弱性 FreeBSD の Stream Control Transmission Protocol (SCTP) モジュールには、配列のインデックスエラーにより、(1) SCTIP_SS_VALUE オプションが設定されている場合、権限を取得される、または (2) SCTP_SS_PRIORITY オプションが有効の場合、任意のカーネルメモリを読まれる脆弱性が存在します。 CVE-2014-8612 75905 CVE-2014-8612 35618 4.6 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007829.html 2014-11-04 2015-02-13 View