CVE-2010-3014

State: Published
Severity: Not scored
Published: Aug 20, 2010
Updated: Aug 7, 2024
Reserved: Aug 16, 2010

Description

The Coda filesystem kernel module, as used in NetBSD and FreeBSD, when Coda is loaded and Venus is running with /coda mounted, allows local users to read sensitive heap memory via a large out_size value in a ViceIoctl struct to a Coda ioctl, which triggers a buffer over-read.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/coda/coda.h.diff?r1=1.15&r2=1.16&only_with_tag=MAIN
http://www.vsecurity.com/resources/advisory/20100816-1/
http://svn.freebsd.org/viewvc/base?view=revision&revision=210997
20100816 CVE-2010-3014: Coda Filesystem Kernel Memory Disclosuremailing-list

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.