PT-2015-4056 · Freebsd · Freebsd

Publicado 2015-02-02 · Atualizado 2015-02-04 · CVE-2014-8613

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions FreeBSD versions 8.4 before p23 FreeBSD versions 9.3 before p9 FreeBSD versions 10.0 before p17 FreeBSD versions 10.1 before p5

Description The issue allows remote attackers to cause a denial of service, resulting in a kernel panic due to a NULL pointer dereference, via a crafted RE CONFIG chunk.

Recommendations For FreeBSD version 8.4, update to p23 or later. For FreeBSD version 9.3, update to p9 or later. For FreeBSD version 10.0, update to p17 or later. For FreeBSD version 10.1, update to p5 or later.

Correção

Identificadores relacionados

CVE-2014-8613

Produtos afetados

Freebsd

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2014-8613 · Nota de Segurança
• http://securitytracker.com/id/1031649 · Nota
• http://securityfocus.com/bid/72345 · Nota
• https://freebsd.org/security/advisories/FreeBSD-SA-15:03.sctp.asc · Aviso do Fabricante