CVE-2014-3952

Related Files

Debian Security Advisory 3070-1

Posted Nov 10, 2014

Authored by Debian | Site debian.org

Debian Linux Security Advisory 3070-1 - Several vulnerabilities have been discovered in the FreeBSD kernel that may lead to a denial of service or information disclosure.

tags | advisory, denial of service, kernel, vulnerability, info disclosure

systems | linux, freebsd, debian

advisories | CVE-2014-3711, CVE-2014-3952, CVE-2014-3953, CVE-2014-8476

SHA-256 | 35934d202298475350a39abfefbd1bbc283d954535307ddb4cbccb516374b025

Download | Favorite | View

FreeBSD Security Advisory - Kernel Memory Disclosure

Posted Jul 9, 2014

Site security.freebsd.org

FreeBSD Security Advisory - The control message API is used to construct ancillary data objects for use in control messages sent and received across sockets and passed via the recvmsg(2) and sendmsg(2) system calls. Buffer between control message header and data may not be completely initialized before being copied to userland. Three SCTP cmsgs, SCTP_SNDRCV, SCTP_EXTRCV and SCTP_RCVINFO, have implicit padding that may not be completely initialized before being copied to userland. In addition, three SCTP notifications, SCTP_PEER_ADDR_CHANGE, SCTP_REMOTE_ERROR and SCTP_AUTHENTICATION_EVENT, have padding in the returning data structure that may not be completely initialized before being copied to userland.

tags | advisory

systems | freebsd

advisories | CVE-2014-3952, CVE-2014-3953

SHA-256 | 767bd2e96e787b131cd8f9c4eb988ad4be4310a86c53084903b0b9dcb602b805

Download | Favorite | View