PT-2002-2901 · Openbsd · Openbsd

Publicado 2002-12-31 · Atualizado 2008-09-05 · CVE-2002-2188

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Média

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: OpenBSD versions prior to 3.2

Description: The issue allows local users to cause a denial of service, resulting in a kernel crash. This can be achieved by making a call to getrlimit(2) with invalid arguments, which may be related to an integer signedness error.

Recommendations: For versions prior to 3.2, update to version 3.2 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2002-2188

Produtos afetados

Openbsd

Referências · 6

• http://iss.net/security_center/static/10572.php · Correção
• http://openbsd.org/errata30.html#kernresource · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2002-2188 · Nota de Segurança
• http://securityfocus.com/bid/6124 · Correção
• ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/018_kernresource.patch · Correção
• http://openbsd.org/errata31.html#kernresource · Correção