Lucene search

K
freebsdFreeBSD73964EAC-6007-11E6-A6C3-14DAE9D210B8
HistoryOct 21, 2014 - 12:00 a.m.

FreeBSD -- memory leak in sandboxed namei lookup

2014-10-2100:00:00
vuxml.freebsd.org
17

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.009 Low

EPSS

Percentile

82.8%

Problem Description:
The namei facility will leak a small amount of kernel
memory every time a sandboxed process looks up a nonexistent
path name.
Impact:
A remote attacker that can cause a sandboxed process
(for instance, a web server) to look up a large number of
nonexistent path names can cause memory exhaustion.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchfreebsd-kernel= 10.0UNKNOWN
FreeBSDanynoarchfreebsd-kernel< 10.0_10UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.009 Low

EPSS

Percentile

82.8%