Lucene search

K
freebsdFreeBSD3C90E093-7C6E-11E2-809B-6C626D99876C
HistoryFeb 19, 2013 - 12:00 a.m.

FreeBSD -- glob(3) related resource exhaustion

2013-02-1900:00:00
vuxml.freebsd.org
21

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.323 Low

EPSS

Percentile

97.0%

Problem description:

GLOB_LIMIT is supposed to limit the number of paths to prevent against
memory or CPU attacks. The implementation however is insufficient.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchfreebsd= 7.4UNKNOWN
FreeBSDanynoarchfreebsd< 7.4_12UNKNOWN

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.323 Low

EPSS

Percentile

97.0%