CVE-2010-3014

The CVE-2010-3014 issue affects the Coda filesystem kernel module used in FreeBSD and NetBSD. A missing validation on the ViceIoctl out_size field (in a Coda ioctl path via Venus with /coda mounted) allows an unprivileged local user to read kernel heap memory by copying more data than intended, e...