Skip to content
OpenAdvisories
Unscored CVE-2014-8611 EUVD-2014-8448GHSA-23qr-ww7m-6r2f

The __sflush function in fflush.c in stdio in libc in FreeBSD 10.1 and the kernel in Apple iOS before 9 mishandles failures of the write sy…

Published Sep 18, 2015 · Updated Aug 6, 2024 · Assigned by mitre

Description

The __sflush function in fflush.c in stdio in libc in FreeBSD 10.1 and the kernel in Apple iOS before 9 mishandles failures of the write system call, which allows context-dependent attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow) via a crafted application.

References