CVE-2010-3014

No fix known EPSS <1%

The Coda filesystem kernel module, as used in NetBSD and FreeBSD, when Coda is loaded and Venus is running with /coda mounted, allows local users to read sensitive heap memory via a large out_size value in a ViceIoctl struct to a Coda ioctl, which triggers a buffer over-read.

Published 2010-08-20 · CVE record · OSV

Products: freebsd, netbsd