CVE-2014-3711

Published: Oct 27, 2014Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

namei in FreeBSD 9.1 through 10.1-RC2 allows remote attackers to cause a denial of service (memory exhaustion) via vectors that trigger a sandboxed process to look up a large number of nonexistent path names.

Affected (16)

Products: Freebsd: Freebsd

Freebsd

1 product

Freebsd

Configuration A

16 vulnerable

Vulnerable Software	Affected Versions
Freebsd Freebsd	Version 10.0
Freebsd Freebsd	Version 10.0 rc1
Freebsd Freebsd	Version 10.0 rc2
Freebsd Freebsd	Version 10.1
Freebsd Freebsd	Version 10.1 rc1
Freebsd Freebsd	Version 10.1 rc2
Freebsd Freebsd	Version 9.1
Freebsd Freebsd	Version 9.1 p4
Freebsd Freebsd	Version 9.1 p5
Freebsd Freebsd	Version 9.2
Freebsd Freebsd	Version 9.2 prerelease
Freebsd Freebsd	Version 9.2 rc1
Freebsd Freebsd	Version 9.2 rc2
Freebsd Freebsd	Version 9.3
Freebsd Freebsd	Version 9.3 rc1
Freebsd Freebsd	Version 9.3 rc2