5

CVE-2014-3955

routed in FreeBSD 8.4 through 10.1-RC2 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an RIP request from a source not on a directly connected network.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Freebsd ≫ Freebsd Version8.4
Freebsd ≫ Freebsd Version9.0
Freebsd ≫ Freebsd Version9.0 Updatebeta1
Freebsd ≫ Freebsd Version9.0 Updatebeta2
Freebsd ≫ Freebsd Version9.0 Updatebeta3
Freebsd ≫ Freebsd Version9.1
Freebsd ≫ Freebsd Version9.1 Updatep4
Freebsd ≫ Freebsd Version9.1 Updatep5
Freebsd ≫ Freebsd Version9.2 Update-
Freebsd ≫ Freebsd Version9.2 Updateprerelease
Freebsd ≫ Freebsd Version9.2 Updaterc1
Freebsd ≫ Freebsd Version9.2 Updaterc2
Freebsd ≫ Freebsd Version9.3
Freebsd ≫ Freebsd Version9.3 Updaterc1
Freebsd ≫ Freebsd Version9.3 Updaterc2
Freebsd ≫ Freebsd Version10.0
Freebsd ≫ Freebsd Version10.0 Updaterc1
Freebsd ≫ Freebsd Version10.0 Updaterc2
Freebsd ≫ Freebsd Version10.1
Freebsd ≫ Freebsd Version10.1 Updaterc1
Freebsd ≫ Freebsd Version10.1 Updaterc2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.54% 0.647
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.