CVE-2014-3000

CVE-2014-3000 describes a denial-of-service vulnerability in the TCP reassembly function of FreeBSD versions 8.3 through 10.0. Remote attackers can exploit this flaw by sending crafted packets, leading to an undefined memory access, system crash, or potentially memory disclosure. This vulnerability carries a CVSS score of 7.8, indicating high severity due to its network-based attack vector, medium attack complexity, and high impact on system availability, with a potential for partial confidentiality impact. The underlying issue is a CWE-119, an improper restriction of operations within the bounds of a memory buffer. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting it has not garnered significant attention.