CVE-2014-0998

State: Published
Severity: Not scored
Published: Feb 2, 2015
Updated: Aug 6, 2024
Reserved: Jan 7, 2014

Description

Integer signedness error in the vt console driver (formerly Newcons) in FreeBSD 9.3 before p10 and 10.1 before p6 allows local users to cause a denial of service (crash) and possibly gain privileges via a negative value in a VT_WAITACTIVE ioctl call, which triggers an array index error and out-of-bounds kernel memory access.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

20150127 [CORE-2015-0003] - FreeBSD Kernel Multiple Vulnerabilitiesmailing-list
20150127 [CORE-2015-0003] - FreeBSD Kernel Multiple Vulnerabilitiesmailing-list
FreeBSD-EN-15:01vendor-advisory
http://www.coresecurity.com/advisories/freebsd-kernel-multiple-vulnerabilities

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.