CVE-2014-3880
Last modified
CVE-2014-3880 is a vulnerability of currently unknown severity. The (1) execve and (2) fexecve system calls in the FreeBSD kernel 8.4 before p11, 9.1 before p14, 9.2 before p7, and 10.0 before p4 destroys the virtual memory address space and mappings for a process before all threads have terminated, which allows local users to cause a denial of service (triple-fault and system reboot) via a crafted system call, which triggers an invalid page table pointer dereference.. EPSS estimates a 0.36% chance of exploitation in the next 30 days.
Description
The (1) execve and (2) fexecve system calls in the FreeBSD kernel 8.4 before p11, 9.1 before p14, 9.2 before p7, and 10.0 before p4 destroys the virtual memory address space and mappings for a process before all threads have terminated, which allows local users to cause a denial of service (triple-fault and system reboot) via a crafted system call, which triggers an invalid page table pointer dereference.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Freebsd | Freebsd | 8.4 |
| Freebsd | Freebsd | 9.1 |
| Freebsd | Freebsd | 9.2 |
| Freebsd | Freebsd | 10.0 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2014-3880?
How severe is CVE-2014-3880?
How do I fix CVE-2014-3880?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2014
- CVE-2014-3873The ktrace utility in the FreeBSD kernel 8.4 before p11, 9.1…
- CVE-2014-3875The addto parameter to fup in Frams' Fast File EXchange (F*E…6.1
- CVE-2014-3876Multiple cross-site scripting (XSS) vulnerabilities in Frams…
- CVE-2014-3877Incomplete blacklist vulnerability in Frams' Fast File EXcha…
- CVE-2014-3878Multiple cross-site scripting (XSS) vulnerabilities in the w…
- CVE-2014-3879OpenPAM Nummularia 9.2 through 10.0 does not properly handle…9.8
- CVE-2014-3881Cross-site request forgery (CSRF) vulnerability in Intercom …
- CVE-2014-3882Cross-site request forgery (CSRF) vulnerability in the Login…
- CVE-2014-3883Usermin before 1.600 allows remote attackers to execute arbi…
- CVE-2014-3884Cross-site scripting (XSS) vulnerability in Usermin before 1…
- CVE-2014-3885Cross-site scripting (XSS) vulnerability in Webmin before 1.…
- CVE-2014-3886Cross-site scripting (XSS) vulnerability in Webmin before 1.…
Are you affected by CVE-2014-3880?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST