PT-2015-4241 · Oracle · Illumos

Robert Mustacchio · Publicado 2015-01-20 · Atualizado 2017-09-08 · CVE-2014-9491

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions illumos (affected versions not specified)

Description The issue is related to the devzvol readdir function in illumos, which fails to check the return value of a strchr call. This oversight allows remote attackers to trigger a denial of service, resulting in a NULL pointer dereference and panic, via unspecified vectors.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2014-9491

Produtos afetados

Illumos

Referências · 5

• https://github.com/illumos/illumos-gate/commit/d65686849024838243515b5c40ae2c479460b4b5 · Nota
• http://seclists.org/oss-sec/2015/q1/27 · Nota
• https://illumos.org/issues/5421 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/99686 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-9491 · Nota de Segurança