CVE-2014-8475
First published: Tue Nov 18 2014(Updated: )
FreeBSD 9.1, 9.2, and 10.0, when compiling OpenSSH with Kerberos support, uses incorrect library ordering when linking sshd, which causes symbols to be resolved incorrectly and allows remote attackers to cause a denial of service (sshd deadlock and prevention of new connections) by ending multiple connections before authentication is completed.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| FreeBSD Kernel | =9.1 | |
| FreeBSD Kernel | =9.2 | |
| FreeBSD Kernel | =10.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://packetstormsecurity.com/files/128972/FreeBSD-Security-Advisory-sshd-Denial-Of-Service.html
- http://secunia.com/advisories/61440
- http://www.securityfocus.com/bid/70913
- http://www.securitytracker.com/id/1031168
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98491
- https://www.freebsd.org/security/advisories/FreeBSD-SA-14%3A24.sshd.asc
Frequently Asked Questions
What is the severity of CVE-2014-8475?
CVE-2014-8475 has a severity rating that indicates a denial of service vulnerability impacting affected FreeBSD versions.
How do I fix CVE-2014-8475?
To fix CVE-2014-8475, upgrade to a patched version of FreeBSD that addresses the library ordering issue in OpenSSH.
Which versions of FreeBSD are affected by CVE-2014-8475?
CVE-2014-8475 affects FreeBSD versions 9.1, 9.2, and 10.0 when compiling OpenSSH with Kerberos support.
What are the potential impacts of CVE-2014-8475?
The potential impacts of CVE-2014-8475 include a denial of service that can cause sshd to deadlock and prevent new connections.
How can remote attackers exploit CVE-2014-8475?
Remote attackers can exploit CVE-2014-8475 by sending multiple connections to the sshd service, leading to a deadlock.
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/last-modified-date
- agent/severity
- agent/weakness
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/freebsd
- canonical/freebsd kernel
- version/freebsd kernel/9.1
- version/freebsd kernel/9.2
- version/freebsd kernel/10.0