PT-2008-2017 · Openbsd · Openbsd

Hunger · Publicado 2008-01-22 · Atualizado 2018-10-30 · CVE-2008-0384

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Média

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions OpenBSD version 4.2

Description The issue allows local users to cause a denial of service, resulting in a kernel panic. This occurs when the SIOCGIFRTLABEL IOCTL is called on an interface without a route label, leading to a NULL pointer dereference. The problem arises because the return value from the rtlabel id2name function is not properly checked.

Recommendations For OpenBSD version 4.2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2008-0384

Produtos afetados

Openbsd

Referências · 7

• 🔥 https://exploit-db.com/exploits/4935 · Exploit
• 🔥 http://securityfocus.com/bid/27252 · Exploit
• http://secunia.com/advisories/28473 · Aviso do Fabricante
• http://securitytracker.com/id?1019188 · Nota
• http://openbsd.org/errata42.html#005_ifrtlabel · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-0384 · Nota de Segurança
• http://marc.info/?l=openbsd-security-announce&m=120007327504064 · Nota