CVE - CVE-2014-3000

CVE-ID
CVE-2014-3000	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
The TCP reassembly function in the inet module in FreeBSD 8.3 before p16, 8.4 before p9, 9.1 before p12, 9.2 before p5, and 10.0 before p2 allows remote attackers to cause a denial of service (undefined memory access and system crash) or possibly read system memory via multiple crafted packets, related to moving a reassemble queue entry to the segment list when the queue is full.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:67153 URL:http://www.securityfocus.com/bid/67153 DEBIAN:DSA-2952 URL:http://www.debian.org/security/2014/dsa-2952 FREEBSD:FreeBSD-SA-14:08 URL:http://www.freebsd.org/security/advisories/FreeBSD-SA-14:08.tcp.asc SECTRACK:1030172 URL:http://www.securitytracker.com/id/1030172 SECUNIA:58293 URL:http://secunia.com/advisories/58293 SECUNIA:59034 URL:http://secunia.com/advisories/59034
Assigning CNA
MITRE Corporation
Date Record Created
20140425	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20140425)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is a record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)