CVE-2018-14775

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

tss_alloc in sys/arch/i386/i386/gdt.c in OpenBSD 6.2 and 6.3 has a Local Denial of Service (system crash) due to incorrect I/O port access control on the i386 architecture.

Metrics

CVSS 3.0 5.5/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sys/arch/i386/i386/gdt.cIssue Tracking, Patch, Vendor Advisory
http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sys/arch/i386/i386/gdt.c.diff?r1=1.37&r2=1.37.8.1&f=hPatch, Vendor Advisory
http://www.securitytracker.com/id/1041550Third Party Advisory, VDB Entry
https://ftp.openbsd.org/pub/OpenBSD/patches/6.2/common/020_ioport.patch.sigPatch, Vendor Advisory
https://ftp.openbsd.org/pub/OpenBSD/patches/6.3/common/015_ioport.patch.sigPatch, Vendor Advisory
http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sys/arch/i386/i386/gdt.cIssue Tracking, Patch, Vendor Advisory
http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sys/arch/i386/i386/gdt.c.diff?r1=1.37&r2=1.37.8.1&f=hPatch, Vendor Advisory
http://www.securitytracker.com/id/1041550Third Party Advisory, VDB Entry
https://ftp.openbsd.org/pub/OpenBSD/patches/6.2/common/020_ioport.patch.sigPatch, Vendor Advisory
https://ftp.openbsd.org/pub/OpenBSD/patches/6.3/common/015_ioport.patch.sigPatch, Vendor Advisory

Timeline

Published: Aug 1, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-147765.4Click Studios Passwordstate before 8.3 Build 8397 allows XSS by authenticated users via an uploaded HTML document.CVE-2018-147775.4An issue was discovered in DataLife Engine (DLE) through 13.0. An attacker can use XSS (related to the /addnews.html and /index.php?do=addne CVE-2018-147796.8A buffer overflow issue was discovered in the Yubico-Piv 1.5.0 smartcard driver. The file lib/ykpiv.c contains the following code in the fun CVE-2018-14786.1IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 could allow a remote attacker to hijack the clicking action of the victim. By CVE-2018-147804.6An out-of-bounds read issue was discovered in the Yubico-Piv 1.5.0 smartcard driver. The file lib/ykpiv.c contains the following code in the CVE-2018-147815.3Medtronic MiniMed MMT devices when paired with a remote controller and having the “easy bolus” and “remote bolus” options enabled (non-def CVE-2018-147827.5NetComm Wireless G LTE Light Industrial M2M Router (NWL-25) with firmware 2.0.29.11 and prior. The device allows access to configuration fil CVE-2018-147838.8NetComm Wireless G LTE Light Industrial M2M Router (NWL-25) with firmware 2.0.29.11 and prior. A cross-site request forgery condition can oc CVE-2018-147846.1NetComm Wireless G LTE Light Industrial M2M Router (NWL-25) with firmware 2.0.29.11 and prior. The device is vulnerable to several cross-sit CVE-2018-147857.5NetComm Wireless G LTE Light Industrial M2M Router (NWL-25) with firmware 2.0.29.11 and prior. The directory of the device is listed openly CVE-2018-147869.4Becton, Dickinson and Company (BD) Alaris Plus medical syringe pumps (models Alaris GS, Alaris GH, Alaris CC, and Alaris TIVA) versions 2.3.CVE-2018-147877.8In Philips' IntelliSpace Cardiovascular (ISCV) products (ISCV Version 2.x or prior and Xcelera Version 4.1 or prior), an attacker with escal