5

CVE-2014-3955

routed in FreeBSD 8.4 through 10.1-RC2 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an RIP request from a source not on a directly connected network.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Freebsd ≫ Freebsd Version 8.4
Freebsd ≫ Freebsd Version 9.0
Freebsd ≫ Freebsd Version 9.0 Update beta1
Freebsd ≫ Freebsd Version 9.0 Update beta2
Freebsd ≫ Freebsd Version 9.0 Update beta3
Freebsd ≫ Freebsd Version 9.1
Freebsd ≫ Freebsd Version 9.1 Update p4
Freebsd ≫ Freebsd Version 9.1 Update p5
Freebsd ≫ Freebsd Version 9.2 Update -
Freebsd ≫ Freebsd Version 9.2 Update prerelease
Freebsd ≫ Freebsd Version 9.2 Update rc1
Freebsd ≫ Freebsd Version 9.2 Update rc2
Freebsd ≫ Freebsd Version 9.3
Freebsd ≫ Freebsd Version 9.3 Update rc1
Freebsd ≫ Freebsd Version 9.3 Update rc2
Freebsd ≫ Freebsd Version 10.0
Freebsd ≫ Freebsd Version 10.0 Update rc1
Freebsd ≫ Freebsd Version 10.0 Update rc2
Freebsd ≫ Freebsd Version 10.1
Freebsd ≫ Freebsd Version 10.1 Update rc1
Freebsd ≫ Freebsd Version 10.1 Update rc2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.55% 0.719
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://secunia.com/advisories/61865
http://www.securitytracker.com/id/1031099
https://www.freebsd.org/security/advisories/FreeBSD-SA-14:21.routed.asc
Patch