Unscored severity · published Nov 18, 2014
CVE-2014-8475
FreeBSD 9.1, 9.2, and 10.0, when compiling OpenSSH with Kerberos support, uses incorrect library ordering when linking sshd, which causes symbols to be resolved incorrectly and…
–
CVSS
1.7%
EPSS
No
On KEV
Description
FreeBSD 9.1, 9.2, and 10.0, when compiling OpenSSH with Kerberos support, uses incorrect library ordering when linking sshd, which causes symbols to be resolved incorrectly and allows remote attackers to cause a denial of service (sshd deadlock and prevention of new connections) by ending multiple connections before authentication is completed.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FR
Freebsd · Freebsd
9.1; 9.2; 10.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-8475
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-8475
packetstormsecurity.com
http://packetstormsecurity.com/files/128972/FreeBSD-Security-Advisory-sshd-Denial-Of-Service.html
secunia.com
http://secunia.com/advisories/61440
www.securityfocus.com
http://www.securityfocus.com/bid/70913
www.securitytracker.com
http://www.securitytracker.com/id/1031168
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/98491
Vendor Advisory
https://www.freebsd.org/security/advisories/FreeBSD-SA-14%3A24.sshd.asc
More from Freebsd
10.0
CVE-2024-43102
umtx Kernel panic or Use-After-Free
10.0
CVE-2018-17160
In FreeBSD before 11.2-STABLE(r341486) and 11.2-RELEASE-p6, insufficient bounds checking in one of the device models provided by bhyve can permit a guest operating system to…
9.8
CVE-2026-101306
Multiple jail filesystem root escapes
9.8
CVE-2026-58082
Stack based buffer overflow in iconv(3)
9.8
CVE-2026-58081
Heap based buffer overflow in iconv(3)