CVE-2014-0998

Integer signedness error in the vt console driver (formerly Newcons) in FreeBSD 9.3 before p10 and 10.1 before p6 allows local users to cause a denial of…

published February 2, 2015

CVSS
—
EPSS
1%
Percentile
60.0
In the wild
Unconfirmed
What it is

Integer signedness error in the vt console driver (formerly Newcons) in FreeBSD 9.3 before p10 and 10.1 before p6 allows local users to cause a denial of service (crash) and possibly gain privileges via a negative value in a VT_WAITACTIVE ioctl call, which triggers an array index error and out-of-bounds kernel memory access.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00924 · 60.0th percentile
Published
2015-02-02T16:00Z
EPSS history
Timeline
  • 02 FEB 16:00Z
    Integer signedness error in the vt console driver (formerly Newcons) in FreeBSD 9.3 before p10 and 10.1 before p6 allows local users to cause a denial of…
    cvelistv5