FreeBSD CVE-2014-3880 Local Denial of Service Vulnerability

Bugtraq ID:	67951
Class:	Design Error
CVE:	CVE-2014-3880
Remote:	No
Local:	Yes
Published:	Jun 03 2014 12:00AM
Updated:	Jun 03 2014 12:00AM
Credit:	Ivo De Decker and Debian GNU/kFreeBSD porters
Vulnerable:	FreeBSD FreeBSD 9.3-PRERELEASE FreeBSD FreeBSD 9.3-BETA1-p2 FreeBSD FreeBSD 9.3-BETA1-p1 FreeBSD FreeBSD 9.3-BETA1 FreeBSD FreeBSD 9.3 FreeBSD FreeBSD 9.2-RELENG FreeBSD FreeBSD 9.2-RELEASE-p8 FreeBSD FreeBSD 9.2-RELEASE-p5 FreeBSD FreeBSD 9.2-RELEASE-p4 FreeBSD FreeBSD 9.2-RELEASE-p3 FreeBSD FreeBSD 9.2-RC3-p1 FreeBSD FreeBSD 9.2-RC2-p2 FreeBSD FreeBSD 9.2-RC2 FreeBSD FreeBSD 9.2-RC1-p2 FreeBSD FreeBSD 9.2-RC1 FreeBSD FreeBSD 9.2 Rc2 FreeBSD FreeBSD 9.2 Rc1 FreeBSD FreeBSD 9.2 Prerelease FreeBSD FreeBSD 9.2 - FreeBSD FreeBSD 9.2 FreeBSD FreeBSD 9.1-STABLE FreeBSD FreeBSD 9.1-RELENG FreeBSD FreeBSD 9.1-RELEASE-p7 FreeBSD FreeBSD 9.1-RELEASE-p3 FreeBSD FreeBSD 9.1-RELEASE-p15 FreeBSD FreeBSD 9.1-RELEASE-p12 FreeBSD FreeBSD 9.1-RELEASE-p11 FreeBSD FreeBSD 9.1-RELEASE-p10 FreeBSD FreeBSD 9.1-RELEASE-p1 FreeBSD FreeBSD 9.1-RC2 FreeBSD FreeBSD 9.1-RC1 FreeBSD FreeBSD 9.1--RELENG FreeBSD FreeBSD 9.1 Release-P5 FreeBSD FreeBSD 9.1 Release-P4 FreeBSD FreeBSD 9.1 FreeBSD FreeBSD 9.0-STABLE FreeBSD FreeBSD 9.0-RELENG FreeBSD FreeBSD 9.0-RELEASE-p6 FreeBSD FreeBSD 9.0-RELEASE FreeBSD FreeBSD 9.0-RC3 FreeBSD FreeBSD 9.0-RC1 FreeBSD FreeBSD 9.0--RELENG FreeBSD FreeBSD 9.0 FreeBSD FreeBSD 8.4-RELENG FreeBSD FreeBSD 8.4-RELEASE-p9 FreeBSD FreeBSD 8.4-RELEASE-p8 FreeBSD FreeBSD 8.4-RELEASE-p7 FreeBSD FreeBSD 8.4-RELEASE-p4 FreeBSD FreeBSD 8.4-RELEASE-p12 FreeBSD FreeBSD 8.4-RC2-p1 FreeBSD FreeBSD 8.4-RC1-p1 FreeBSD FreeBSD 8.4-PRERELEASE FreeBSD FreeBSD 8.4-BETA1 FreeBSD FreeBSD 8.4 FreeBSD FreeBSD 8.3-STABLE FreeBSD FreeBSD 8.3-RELENG FreeBSD FreeBSD 8.3-RELEASE-p8 FreeBSD FreeBSD 8.3-RELEASE-p6 FreeBSD FreeBSD 8.3-RELEASE-p16 FreeBSD FreeBSD 8.3-RELEASE-p15 FreeBSD FreeBSD 8.3-RELEASE-p14 FreeBSD FreeBSD 8.3-RELEASE-p11 FreeBSD FreeBSD 8.3 FreeBSD FreeBSD 8.2-STABLE FreeBSD FreeBSD 8.2-RELEASE-p2 FreeBSD FreeBSD 8.2-RELEASE-p1 FreeBSD FreeBSD 8.2-RELEASE FreeBSD FreeBSD 8.2 - RELEASE -p3 FreeBSD FreeBSD 8.2 FreeBSD FreeBSD 8.1-STABLE FreeBSD FreeBSD 8.1-RELENG FreeBSD FreeBSD 8.1-RELEASE-p5 FreeBSD FreeBSD 8.1-RELEASE-p4 FreeBSD FreeBSD 8.1-RELEASE-p1 FreeBSD FreeBSD 8.1-RELEASE FreeBSD FreeBSD 8.1-PRERELEASE FreeBSD FreeBSD 8.1 FreeBSD FreeBSD 8.0-STABLE FreeBSD FreeBSD 8.0-RELEASE FreeBSD FreeBSD 8.0-RC1 FreeBSD FreeBSD 8.0 -RELEASE-p5 FreeBSD FreeBSD 8.0 FreeBSD FreeBSD 8-STABLE FreeBSD FreeBSD 8-RELENG FreeBSD FreeBSD 10.0-RELEASE-p5 FreeBSD FreeBSD 10.0-RELEASE-p2 FreeBSD FreeBSD 10.0-RELEASE-p1 FreeBSD FreeBSD 10.0-RC3-p1 FreeBSD FreeBSD 10.0-RC2-p1 FreeBSD FreeBSD 10.0-RC1-p1 FreeBSD FreeBSD 10.0-BETA FreeBSD Freebsd 10.0 FreeBSD FreeBSD 10
Not Vulnerable:	FreeBSD FreeBSD 9.2-STABLE FreeBSD FreeBSD 9.2-RELEASE-p7 FreeBSD FreeBSD 9.1-RELEASE-p14 FreeBSD FreeBSD 8.4-STABLE FreeBSD FreeBSD 8.4-RELEASE-p11 FreeBSD FreeBSD 10.0-STABLE FreeBSD FreeBSD 10.0-RELEASE-p4

FreeBSD CVE-2014-3880 Local Denial of Service Vulnerability

FreeBSD is prone to a local denial-of-service vulnerability.

Attackers can exploit this issue to cause a system reboot, denying further service to legitimate users.

FreeBSD CVE-2014-3880 Local Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

FreeBSD CVE-2014-3880 Local Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or contact the vendor for more information.

FreeBSD CVE-2014-3880 Local Denial of Service Vulnerability

References:

• FreeBSD Homepage (FreeBSD)
  
• Triple-fault when executing from a threaded process (FreeBSD)