What is the severity of CVE-2014-3000?

CVE-2014-3000 is classified as a medium severity vulnerability due to its potential to cause denial of service and system crashes.

How do I fix CVE-2014-3000?

To remediate CVE-2014-3000, you should update your FreeBSD system to a fixed version as outlined in the security advisory.

What software versions are affected by CVE-2014-3000?

CVE-2014-3000 affects FreeBSD versions 8.3 before p16, 8.4 before p9, 9.1 before p12, 9.2 before p5, and 10.0 before p2.

What type of attack does CVE-2014-3000 enable?

CVE-2014-3000 allows remote attackers to cause a denial of service or possibly read system memory through specially crafted TCP packets.

Is CVE-2014-3000 a remotely exploitable vulnerability?

Yes, CVE-2014-3000 is a remotely exploitable vulnerability, making it a significant risk for affected systems.

Vulnerability/
CVE-2014-3000

high

7.8

CWE

119

2/5/2014

6/8/2024

CVE-2014-3000: Buffer Overflow

First published: Fri May 02 2014(Updated: )

The TCP reassembly function in the inet module in FreeBSD 8.3 before p16, 8.4 before p9, 9.1 before p12, 9.2 before p5, and 10.0 before p2 allows remote attackers to cause a denial of service (undefined memory access and system crash) or possibly read system memory via multiple crafted packets, related to moving a reassemble queue entry to the segment list when the queue is full.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
FreeBSD Kernel	=8.3
FreeBSD Kernel	=8.4
FreeBSD Kernel	=9.1
FreeBSD Kernel	=9.2
FreeBSD Kernel	=10.0

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2014-3000?
CVE-2014-3000 is classified as a medium severity vulnerability due to its potential to cause denial of service and system crashes.
How do I fix CVE-2014-3000?
To remediate CVE-2014-3000, you should update your FreeBSD system to a fixed version as outlined in the security advisory.
What software versions are affected by CVE-2014-3000?
CVE-2014-3000 affects FreeBSD versions 8.3 before p16, 8.4 before p9, 9.1 before p12, 9.2 before p5, and 10.0 before p2.
What type of attack does CVE-2014-3000 enable?
CVE-2014-3000 allows remote attackers to cause a denial of service or possibly read system memory through specially crafted TCP packets.
Is CVE-2014-3000 a remotely exploitable vulnerability?
Yes, CVE-2014-3000 is a remotely exploitable vulnerability, making it a significant risk for affected systems.

agent/references
agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/severity
agent/last-modified-date
agent/weakness
agent/author
agent/first-publish-date
agent/event
agent/description
agent/source
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
vendor/freebsd
canonical/freebsd kernel
version/freebsd kernel/8.3
version/freebsd kernel/8.4
version/freebsd kernel/9.1
version/freebsd kernel/9.2
version/freebsd kernel/10.0

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.