CVE-2014-7250: Medium severity bsd vulnerability
Published Dec 12, 2014
·Updated
The TCP stack in 4.3BSD Net/2, as used in FreeBSD 5.4, NetBSD possibly 2.0, and OpenBSD possibly 3.6, does not properly implement the session timer, which allows remote attackers to cause a denial of service (resource consumption) via crafted packets.
Affected Software
4 affected components
BSD BSD=4.3
FreeBSD FreeBSD=5.4
NetBSD NetBSD=2.0
OpenBSD OpenBSD=3.6
Event History
Dec 12, 2014
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-7250?
CVE-2014-7250 is classified as a denial of service vulnerability.
2
How do I fix CVE-2014-7250?
To fix CVE-2014-7250, apply the appropriate patches or updates for your operating system version.
3
What systems are affected by CVE-2014-7250?
CVE-2014-7250 affects 4.3BSD Net/2, FreeBSD 5.4, NetBSD 2.0, and OpenBSD 3.6.
4
What type of attack does CVE-2014-7250 enable?
CVE-2014-7250 allows remote attackers to perform denial of service attacks through crafted packets.
5
Can I exploit CVE-2014-7250 remotely?
Yes, CVE-2014-7250 can be exploited remotely by sending specially crafted packets.