CVE-2014-1453: Freebsd

Medium severity, CVSS 4.0. EPSS: 2% chance of exploitation in the next 30 days.

The NFS server (nfsserver) in FreeBSD 8.3 through 10.0 does not acquire locks in the proper order when converting a directory file handle to a vnode, which allows remote authenticated users to cause a denial of service (deadlock) via vectors involving a thread that uses the correct locking order.

Affected products

• Freebsd Freebsd: version 8.3 only; version 8.4 only; version 9.0 only; version 9.1 only; version 9.2 only; version 10.0 only

Published 2014-04-16. Last modified 2026-06-17.