SB2015020214 - Input validation error in FreeBSD

Description

This security bulletin contains information about 1 vulnerability.

1) Input validation error (CVE-ID: CVE-2014-0998)

CWE-ID: CWE-20 - Improper input validation

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/U:Amber

The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.

Integer signedness error in the vt console driver (formerly Newcons) in FreeBSD 9.3 before p10 and 10.1 before p6 allows local users to cause a denial of service (crash) and possibly gain privileges via a negative value in a VT_WAITACTIVE ioctl call, which triggers an array index error and out-of-bounds kernel memory access.

Remediation

Install update from vendor's website.

References

• http://seclists.org/fulldisclosure/2015/Jan/107
• http://www.coresecurity.com/advisories/freebsd-kernel-multiple-vulnerabilities
• http://www.securityfocus.com/archive/1/534563/100/0/threaded
• https://www.freebsd.org/security/advisories/FreeBSD-EN-15:01.vt.asc