CVE-2014-8612
FreeBSD - Local Privilege Escalation and Arbitrary Kernel Memory Read via SCTP Stream ID
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2014-8612. PoCs published by Core Security.
AI-analyzed exploit summary The document describes multiple vulnerabilities in the FreeBSD kernel, including a sign conversion error in the vt console driver (CVE-2014-0998) and a memory corruption issue in SCTP socket handling (CVE-2014-8612). These vulnerabilities allow local unprivileged attackers to execute arbitrary code with superuser privileges or crash the system.
Description
Multiple array index errors in the Stream Control Transmission Protocol (SCTP) module in FreeBSD 10.1 before p5, 10.0 before p17, 9.3 before p9, and 8.4 before p23 allow local users to (1) gain privileges via the stream id to the setsockopt function, when setting the SCTIP_SS_VALUE option, or (2) read arbitrary kernel memory via the stream id to the getsockopt function, when getting the SCTP_SS_PRIORITY option.
Exploits (1)
The document describes multiple vulnerabilities in the FreeBSD kernel, including a sign conversion error in the vt console driver (CVE-2014-0998) and a memory corruption issue in SCTP socket handling (CVE-2014-8612). These vulnerabilities allow local unprivileged attackers to execute arbitrary code with superuser privileges or crash the system.