CVE-2014-0998 in FreeBSD
요약 (영어)
Integer signedness error in the vt console driver (formerly Newcons) in FreeBSD 9.3 before p10 and 10.1 before p6 allows local users to cause a denial of service (crash) and possibly gain privileges via a negative value in a VT_WAITACTIVE ioctl call, which triggers an array index error and out-of-bounds kernel memory access.
예약하다
2014. 01. 07.
공개
2015. 02. 02.
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 69022 | FreeBSD vt Console Local Privilege Escalation | 189 | 개념 증명 | 공식 수정 | CVE-2014-0998 |