CVE-2014-0998

NameCVE-2014-0998
DescriptionInteger signedness error in the vt console driver (formerly Newcons) in FreeBSD 9.3 before p10 and 10.1 before p6 allows local users to cause a denial of service (crash) and possibly gain privileges via a negative value in a VT_WAITACTIVE ioctl call, which triggers an array index error and out-of-bounds kernel memory access.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs779194

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
kfreebsd-10source(unstable)10.1~svn274115-3779194
kfreebsd-11unknownexperimental11.0~svn284956-1
kfreebsd-8source(unstable)(not affected)
kfreebsd-9source(unstable)(not affected)

Notes

- kfreebsd-9 <not-affected> (don't have newcons)
- kfreebsd-8 <not-affected> (don't have newcons)
https://www.freebsd.org/security/advisories/FreeBSD-SA-15:02.kmem.asc
Search for package or bug name: Reporting problems