Lucene search
HistoryNov 13, 2014 - 9:32 p.m.
CVE-2014-8476
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
5.5 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
The setlogin function in FreeBSD 8.4 through 10.1-RC4 does not initialize the buffer used to store the login name, which allows local users to obtain sensitive information from kernel memory via a call to getlogin, which returns the entire buffer.
Affected configurations
Node
freebsdfreebsdMatch8.4
ORfreebsdfreebsdMatch9.0
ORfreebsdfreebsdMatch9.0beta1
ORfreebsdfreebsdMatch9.0beta2
ORfreebsdfreebsdMatch9.1
ORfreebsdfreebsdMatch9.2
ORfreebsdfreebsdMatch9.3
ORfreebsdfreebsdMatch10.0
ORfreebsdfreebsdMatch10.1
ORfreebsdfreebsdMatch10.1rc1
ORfreebsdfreebsdMatch10.1rc2
ORfreebsdfreebsdMatch10.1rc3
ORfreebsdfreebsdMatch10.1rc4
Related
securityvulns
securityvulns
FreeBSD information leakage
2014-11-10 00:00:00
FreeBSD Security Advisory FreeBSD-SA-14:25.setlogin
2014-11-10 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-14:25.setlogin
2014-11-04 00:00:00
ubuntucve
ubuntucve
CVE-2014-8476
2014-11-13 00:00:00
prion
prion
Buffer overflow
2014-11-13 21:32:00
cve
cve
CVE-2014-8476
2014-11-13 21:32:07
freebsd
freebsd
FreeBSD -- Kernel stack disclosure in setlogin(2) / getlogin(2)
2014-11-04 00:00:00
nessus
nessus
debiancve
debiancve
CVE-2014-8476
2014-11-13 21:32:07
cvelist
cvelist
CVE-2014-8476
2014-11-13 15:00:00
debian
debian
[SECURITY] [DSA 3070-1] kfreebsd-9 security update
2014-11-07 17:54:56
osv
osv
kfreebsd-9 - security update
2014-11-07 00:00:00
openvas
openvas
Debian Security Advisory DSA 3070-1 (kfreebsd-9 - security update)
2014-11-07 00:00:00
Debian: Security Advisory (DSA-3070-1)
2014-11-06 00:00:00
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
5.5 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for NVD:CVE-2014-8476