PT-2001-2144 · Netbsd · Netbsd

Published 2001-07-24 · Updated 2017-10-10 · CVE-2001-0993

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions NetBSD versions 1.3 through 1.5

Description The issue concerns a problem with the sendmsg function that allows local users to cause a denial of service, potentially leading to a kernel trap or panic. This is achieved by using a msghdr structure with a large msg controllen length.

Recommendations For NetBSD versions 1.3 through 1.5, consider restricting the use of the sendmsg function until a patch is available. As a temporary workaround, avoid using the msghdr structure with large msg controllen lengths to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2001-0993

Affected Products

Netbsd

References · 5

• http://securityfocus.com/bid/3088 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-0993 · Security Note
• http://archives.neohapsis.com/archives/netbsd/2001-q3/0102.html · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6908 · Note
• http://osvdb.org/1910 · Note