VULNERABILITY INTELLIGENCE
CVE-2010-3014
CVSS score1.2 LOW
EPSS probability0.27%
CISA KEVNot currently listed
Published2010-08-20
Last modified2026-06-16
CVSS vectorAV:L/AC:H/Au:N/C:P/I:N/A:N
Description
The Coda filesystem kernel module, as used in NetBSD and FreeBSD, when Coda is loaded and Venus is running with /coda mounted, allows local users to read sensitive heap memory via a large out_size value in a ViceIoctl struct to a Coda ioctl, which triggers a buffer over-read.
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor