Unscored CVE-2014-9491 EUVD-2014-9308GHSA-vr47-prxx-24cf

The devzvol_readdir function in illumos does not check the return value of a strchr call, which allows remote attackers to cause a denial o…

Published Jan 20, 2015 · Updated Aug 6, 2024 · Assigned by mitre

Description

The devzvol_readdir function in illumos does not check the return value of a strchr call, which allows remote attackers to cause a denial of service (NULL pointer dereference and panic) via unspecified vectors.

References

https://www.illumos.org/issues/5421
illumos-cve-20149491-dos(99686) vdb-entry
https://github.com/illumos/illumos-gate/commit/d65686849024838243515b5c40ae2c479460b4b5
[oss-security] 20150103 Re: CVE Request for illumos distributions mailing-list