Security Advisory

CVE-2010-3014

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2010-08-20 19:00:00
Last updated 2024-08-07 02:55:46
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

The Coda filesystem kernel module, as used in NetBSD and FreeBSD, when Coda is loaded and Venus is running with /coda mounted, allows local users to read sensitive heap memory via a large out_size value in a ViceIoctl struct to a Coda ioctl, which triggers a buffer over-read.