CVE-2014-3880
- State
- Published
- Severity
- Not scored
- Published
- Jun 10, 2014
- Updated
- Aug 6, 2024
- Reserved
- May 27, 2014
Description
The (1) execve and (2) fexecve system calls in the FreeBSD kernel 8.4 before p11, 9.1 before p14, 9.2 before p7, and 10.0 before p4 destroys the virtual memory address space and mappings for a process before all threads have terminated, which allows local users to cause a denial of service (triple-fault and system reboot) via a crafted system call, which triggers an invalid page table pointer dereference.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- DSA-2952vendor-advisory
- 59034third-party-advisory
- http://www.freebsd.org/security/advisories/FreeBSD-EN-14%3A06.exec.asc
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.