CVE-2014-3880 in FreeBSD
Summary
The (1) execve and (2) fexecve system calls in the FreeBSD kernel 8.4 before p11, 9.1 before p14, 9.2 before p7, and 10.0 before p4 destroys the virtual memory address space and mappings for a process before all threads have terminated, which allows local users to cause a denial of service (triple-fault and system reboot) via a crafted system call, which triggers an invalid page table pointer dereference.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
05/27/2014
Disclosure
06/10/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 13483 | FreeBSD Threaded Process fexecve input validation | 20 | Unproven | Official fix | CVE-2014-3880 |