What’s Vulnerable › Vulnerabilities

CVE-2010-3014

• Severity: low (CVSS 1.2 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2010-08-20 · updated 2026-06-16
• Weakness: CWE-200

Description

The Coda filesystem kernel module, as used in NetBSD and FreeBSD, when Coda is loaded and Venus is running with /coda mounted, allows local users to read sensitive heap memory via a large out_size value in a ViceIoctl struct to a Coda ioctl, which triggers a buffer over-read.

Affected products

• FreeBSD: all versions
• Netbsd: all versions

References

• http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/coda/coda.h.diff?r1=1.15&r2=1.16&only_with_tag=MAIN
• http://svn.freebsd.org/viewvc/base?view=revision&revision=210997
• http://www.securityfocus.com/archive/1/513151/100/0/threaded
• http://www.vsecurity.com/resources/advisory/20100816-1/
• http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/coda/coda.h.diff?r1=1.15&r2=1.16&only_with_tag=MAIN
• http://svn.freebsd.org/viewvc/base?view=revision&revision=210997
• http://www.securityfocus.com/archive/1/513151/100/0/threaded
• http://www.vsecurity.com/resources/advisory/20100816-1/

Get alerted when CVE-2010-3014 or the next vulnerability affects your stack