Lucene search

K
ubuntucveUbuntu.comUB:CVE-2014-3880
HistoryJun 10, 2014 - 12:00 a.m.

CVE-2014-3880

2014-06-1000:00:00
ubuntu.com
ubuntu.com
5

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

0.0004 Low

EPSS

Percentile

5.2%

The (1) execve and (2) fexecve system calls in the FreeBSD kernel 8.4
before p11, 9.1 before p14, 9.2 before p7, and 10.0 before p4 destroys the
virtual memory address space and mappings for a process before all threads
have terminated, which allows local users to cause a denial of service
(triple-fault and system reboot) via a crafted system call, which triggers
an invalid page table pointer dereference.

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

0.0004 Low

EPSS

Percentile

5.2%