CVE-2014-8475

Published: Nov 18, 2014Modified: May 6, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

FreeBSD 9.1, 9.2, and 10.0, when compiling OpenSSH with Kerberos support, uses incorrect library ordering when linking sshd, which causes symbols to be resolved incorrectly and allows remote attackers to cause a denial of service (sshd deadlock and prevention of new connections) by ending multiple connections before authentication is completed.

Affected (3)

Products: Freebsd: Freebsd

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Freebsd Freebsd	Version 10.0
Freebsd Freebsd	Version 9.1
Freebsd Freebsd	Version 9.2

Related CWEs

References (12)

http://packetstormsecurity.com/files/128972/FreeBSD-Security-Advisory-sshd-Denial-Of-Service.html

Source: cve@mitre.org

http://secunia.com/advisories/61440

Source: cve@mitre.org

http://www.securityfocus.com/bid/70913

Source: cve@mitre.org

http://www.securitytracker.com/id/1031168

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/98491

Source: cve@mitre.org

https://www.freebsd.org/security/advisories/FreeBSD-SA-14%3A24.sshd.asc

Source: cve@mitre.org

Vendor Advisory

http://packetstormsecurity.com/files/128972/FreeBSD-Security-Advisory-sshd-Denial-Of-Service.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/61440

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/70913

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1031168

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/98491

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.freebsd.org/security/advisories/FreeBSD-SA-14%3A24.sshd.asc

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.