Vulnerability in Freebsd

CVE-2014-3001

The device file system (aka devfs) in FreeBSD 10.0 before p2 does not load default rulesets when booting, which allows context-dependent attackers to bypass intended restrictions by leveraging a jailed device node process.

EPSS: 0.010 (59.9th percentile) — read the EPSS interpretation.

Affected products

Freebsd — versions 10.0
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (x_refsource_FREEBSD, vendor-advisory, Vendor Advisory)