Lucene search
HistoryDec 12, 2014 - 3:59 p.m.
CVE-2014-8608
cve-2014-8608
k7sentry.sys
k7av sentry device driver
denial of service
null pointer dereference
security vulnerability
nvd
4.9 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C
6.3 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
10.0%
The K7Sentry.sys kernel mode driver (aka K7AV Sentry Device Driver) before 12.8.0.119, as used in multiple K7 Computing products, allows local users to cause a denial of service (NULL pointer dereference) as demonstrated by a filename containing “crashme$$”.
Affected configurations
Node
k7computingk7av_sentry_device_driverRange≤12.8.0.118
| CPE | Name | Operator | Version |
|---|---|---|---|
| k7computing:k7av_sentry_device_driver | k7computing k7av sentry device driver | le | 12.8.0.118 |
Related
prion
prion
Null pointer dereference
2014-12-12 15:59:00
nvd
nvd
CVE-2014-8608
2014-12-12 15:59:12
cvelist
cvelist
CVE-2014-8608
2014-12-12 15:00:00
4.9 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C
6.3 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
10.0%
Related for CVE-2014-8608