CVE-2014-9491

CVE-2014-9491 describes a denial-of-service vulnerability in the devzvol_readdir function of illumos, stemming from a missing return value check for a strchr call. This flaw allows remote attackers to trigger a NULL pointer dereference, leading to a system panic. With a CVSS score of 5.0, it is considered a medium-severity vulnerability, requiring low attack complexity and no authentication, but only impacting availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.