CVE-2014-8611: Buffer Overflow
The sflush function in fflush.c in stdio in libc in FreeBSD 10.1 and the kernel in Apple iOS before 9 mishandles failures of the write system call, which allows context-dependent attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow) via a crafted application.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-8611?
CVE-2014-8611 has a severity rating of high due to its potential for arbitrary code execution and denial of service.
What versions are affected by CVE-2014-8611?
CVE-2014-8611 affects FreeBSD 10.1 and Apple iOS versions before 9, as well as macOS Yosemite versions up to 10.10.5.
How do I fix CVE-2014-8611?
To mitigate CVE-2014-8611, upgrade FreeBSD to a version later than 10.1 and update iOS and macOS to their latest releases.
What types of attacks can leverage CVE-2014-8611?
Attackers can exploit CVE-2014-8611 to execute arbitrary code or cause a denial of service through a heap-based buffer overflow.
Is CVE-2014-8611 a kernel vulnerability?
Yes, CVE-2014-8611 involves the kernel in Apple iOS and the libc implementation in FreeBSD.