PT-2002-2391 · Freebsd · Freebsd

Publicado 2002-12-31 · Atualizado 2017-07-11 · CVE-2002-1667

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions FreeBSD versions 4.5 and earlier

Description The issue is related to the virtual memory management system, which does not properly check the existence of a VM object during page invalidation. This allows local users to cause a denial of service by calling msync on an unaccessed memory map created with MAP ANON and MAP NOSYNC flags.

Recommendations For FreeBSD versions 4.5 and earlier, consider updating to a newer version to resolve the issue. As a temporary workaround, avoid using the msync function on unaccessed memory maps created with MAP ANON and MAP NOSYNC flags to minimize the risk of a denial of service.

Correção

Identificadores relacionados

CVE-2002-1667

Produtos afetados

Freebsd

Referências · 3

• https://exchange.xforce.ibmcloud.com/vulnerabilities/8921 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-1667 · Nota de Segurança
• ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:22.mmap.asc · Aviso do Fabricante