« Volver al listado

CVE-2014-3711

Estado: ModificadaMedia (5)—

namei in FreeBSD 9.1 through 10.1-RC2 allows remote attackers to cause a denial of service (memory exhaustion) via vectors that trigger a sandboxed process to look up a large number of nonexistent path names.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Freebsd — Freebsd

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2014-3711",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "secalert@redhat.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-10-27T15:55:24.110",
  "references": [
    {
      "url": "http://secunia.com/advisories/62218",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.debian.org/security/2014/dsa-3070",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.securitytracker.com/id/1031100",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://www.freebsd.org/security/advisories/FreeBSD-SA-14:22.namei.asc",
      "tags": [
        "Patch"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://secunia.com/advisories/62218",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.debian.org/security/2014/dsa-3070",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id/1031100",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.freebsd.org/security/advisories/FreeBSD-SA-14:22.namei.asc",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-399"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "namei in FreeBSD 9.1 through 10.1-RC2 allows remote attackers to cause a denial of service (memory exhaustion) via vectors that trigger a sandboxed process to look up a large number of nonexistent path names."
    },
    {
      "lang": "es",
      "value": "namei en FreeBSD 9.1 hasta 10.1-RC2 permite a atacantes remotos causar una denegación de servicio (agotamiento de memoria) a través de vectores que provocan que un proceso de sandbox busque un número grande de nombres de rutas no existentes."
    }
  ],
  "lastModified": "2026-06-17T00:08:48.057",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:freebsd:freebsd:9.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D78E559A-430D-4D50-8A83-58A37D393471"
            },
            {
              "criteria": "cpe:2.3:o:freebsd:freebsd:9.1:p4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DD6B2A2E-6E8C-40D7-B29F-1FC9E8B1076B"
            },
            {
              "criteria": "cpe:2.3:o:freebsd:freebsd:9.1:p5:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0ADB3AF3-5E13-4EC3-AE3C-128DF51E1DF9"
            },
            {
              "criteria": "cpe:2.3:o:freebsd:freebsd:9.2:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F377F93B-93E0-423C-BED2-35D5A01ED52C"
            },
            {
              "criteria": "cpe:2.3:o:freebsd:freebsd:9.2:prerelease:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "213ECCF5-4FE2-4FE8-B84E-A1C9AA98F1F2"
            },
            {
              "criteria": "cpe:2.3:o:freebsd:freebsd:9.2:rc1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C52A912B-E7C6-484A-8E15-8208C97B8CB4"
            },
            {
              "criteria": "cpe:2.3:o:freebsd:freebsd:9.2:rc2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D4B097BE-2CA1-4236-AB8F-1151FCC845A9"
            },
            {
              "criteria": "cpe:2.3:o:freebsd:freebsd:9.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "57052F01-8695-4C63-A947-7671375B9312"
            },
            {
              "criteria": "cpe:2.3:o:freebsd:freebsd:9.3:rc1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A64DC63D-2C25-4628-B7A5-0A04F0605337"
            },
            {
              "criteria": "cpe:2.3:o:freebsd:freebsd:9.3:rc2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EFCCA127-41FA-41EC-A457-B794C85FD4E2"
            },
            {
              "criteria": "cpe:2.3:o:freebsd:freebsd:10.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CA79CE41-D873-4A4A-A20C-83EB8772E5FA"
            },
            {
              "criteria": "cpe:2.3:o:freebsd:freebsd:10.0:rc1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "62E1B1F3-27AB-4ED2-8252-3AEA0959B557"
            },
            {
              "criteria": "cpe:2.3:o:freebsd:freebsd:10.0:rc2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6140E28B-6F37-4BE9-93AB-E7FC06BD97A7"
            },
            {
              "criteria": "cpe:2.3:o:freebsd:freebsd:10.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F6D63B21-9D2E-4B15-9E60-6181D44B1F55"
            },
            {
              "criteria": "cpe:2.3:o:freebsd:freebsd:10.1:rc1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3BDEF786-0D79-4B1E-BBB8-0FC5B258F03C"
            },
            {
              "criteria": "cpe:2.3:o:freebsd:freebsd:10.1:rc2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "93A7E512-EB2B-46CC-BB53-82B6C7166D53"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secalert@redhat.com"
}