Lucene search

K
cvelistMitreCVELIST:CVE-2014-8476
HistoryNov 13, 2014 - 3:00 p.m.

CVE-2014-8476

2014-11-1315:00:00
mitre
www.cve.org

5.4 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

The setlogin function in FreeBSD 8.4 through 10.1-RC4 does not initialize the buffer used to store the login name, which allows local users to obtain sensitive information from kernel memory via a call to getlogin, which returns the entire buffer.

5.4 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%