CVE-2014-1453

Severity: medium (CVSS 4.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-04-16 · updated 2026-06-17
Weakness: CWE-399

Description

The NFS server (nfsserver) in FreeBSD 8.3 through 10.0 does not acquire locks in the proper order when converting a directory file handle to a vnode, which allows remote authenticated users to cause a denial of service (deadlock) via vectors involving a thread that uses the correct locking order.

Affected products

FreeBSD: 8.3, 8.4, 9.0, 9.0-beta1, 9.0-beta2, 9.0-beta3 (+8)

References

http://secunia.com/advisories/57760
http://secunia.com/advisories/59034
http://www.debian.org/security/2014/dsa-2952
http://www.freebsd.org/security/advisories/FreeBSD-SA-14:05.nfsserver.asc
http://www.securityfocus.com/bid/66726
http://www.securitytracker.com/id/1030041
http://secunia.com/advisories/57760
http://secunia.com/advisories/59034
http://www.debian.org/security/2014/dsa-2952
http://www.freebsd.org/security/advisories/FreeBSD-SA-14:05.nfsserver.asc
http://www.securityfocus.com/bid/66726
http://www.securitytracker.com/id/1030041

Get alerted when CVE-2014-1453 or the next vulnerability affects your stack