CVE-2014-3001: Freebsd

Medium severity, CVSS 5.8. EPSS: 1% chance of exploitation in the next 30 days.

The device file system (aka devfs) in FreeBSD 10.0 before p2 does not load default rulesets when booting, which allows context-dependent attackers to bypass intended restrictions by leveraging a jailed device node process.

Affected products

• Freebsd Freebsd: version 10.0 only

Published 2014-05-02. Last modified 2026-06-17.