CVE-2014-3953

FreeBSD 8.4 before p14, 9.1 before p17, 9.2 before p10, and 10.0 before p7 does not properly initialize certain data structures, which allows local users to…

published July 15, 2014

CVSS
—
EPSS
0%
Percentile
27.2
In the wild
Unconfirmed
What it is

FreeBSD 8.4 before p14, 9.1 before p17, 9.2 before p10, and 10.0 before p7 does not properly initialize certain data structures, which allows local users to obtain sensitive information from kernel memory via a (1) SCTP_SNDRCV, (2) SCTP_EXTRCV, or (3) SCTP_RCVINFO SCTP cmsg or a (4) SCTP_PEER_ADDR_CHANGE, (5) SCTP_REMOTE_ERROR, or (6) SCTP_AUTHENTICATION_EVENT notification.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00350 · 27.2th percentile
Published
2014-07-15T14:00Z
EPSS history
Timeline
  • 15 JUL 14:00Z
    FreeBSD 8.4 before p14, 9.1 before p17, 9.2 before p10, and 10.0 before p7 does not properly initialize certain data structures, which allows local users to…
    cvelistv5