CVE-2014-0998 in FreeBSD
Sumário (Inglês)
Integer signedness error in the vt console driver (formerly Newcons) in FreeBSD 9.3 before p10 and 10.1 before p6 allows local users to cause a denial of service (crash) and possibly gain privileges via a negative value in a VT_WAITACTIVE ioctl call, which triggers an array index error and out-of-bounds kernel memory access.
Reservar
07/01/2014
Divulgação
02/02/2015
Inscrições
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidade | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 69022 | FreeBSD vt Console Local Privilege Escalation | 189 | Prova de conceito | Correção oficial | CVE-2014-0998 |