Lucene search

MitreCVE-2010-3014

HistoryAug 20, 2010 - 8:00 p.m.

CVE-2010-3014

2010-08-2020:00:02

CWE-200

mitre

web.nvd.nist.gov

cve-2010-3014

coda filesystem

kernel module

netbsd

freebsd

venus

buffer over-read

security vulnerability

CVSS2

1.2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:H/Au:N/C:P/I:N/A:N

AI Score

6.3

Confidence

Low

EPSS

Percentile

5.1%

JSON

The Coda filesystem kernel module, as used in NetBSD and FreeBSD, when Coda is loaded and Venus is running with /coda mounted, allows local users to read sensitive heap memory via a large out_size value in a ViceIoctl struct to a Coda ioctl, which triggers a buffer over-read.

Affected configurations

Nvd

Node

freebsdfreebsd

netbsdnetbsd

VendorProductVersionCPE
freebsdfreebsd*cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*
netbsdnetbsd*cpe:2.3:o:netbsd:netbsd:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
freebsd	freebsd	*	cpe:2.3:o:freebsd:freebsd::::::::
netbsd	netbsd	*	cpe:2.3:o:netbsd:netbsd::::::::

References

cvsweb.netbsd.org/bsdweb.cgi/src/sys/coda/coda.h.diff?r1=1.15&r2=1.16&only_with_tag=MAIN

svn.freebsd.org/viewvc/base?view=revision&revision=210997

www.securityfocus.com/archive/1/513151/100/0/threaded

www.vsecurity.com/resources/advisory/20100816-1/

CVSS2

1.2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:H/Au:N/C:P/I:N/A:N

AI Score

6.3

Confidence

Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2010-3014