Vulnerability in Freebsd
CVE-2014-3711
namei in FreeBSD 9.1 through 10.1-RC2 allows remote attackers to cause a denial of service (memory exhaustion) via vectors that trigger a sandboxed process to look up a large number of nonexistent path names.
EPSS: 0.016 (72.8th percentile) — read the EPSS interpretation.
Affected products
- Freebsd — versions 9.1, 9.2, 9.3
- N/a — versions n/a
Weakness classification (CWE)
References
- secalert@redhat.com (vendor-advisory, x_refsource_DEBIAN)
- secalert@redhat.com (x_refsource_SECUNIA, third-party-advisory)
- secalert@redhat.com (x_refsource_FREEBSD, vendor-advisory, Patch)
- secalert@redhat.com (vdb-entry, x_refsource_SECTRACK)