PT-2002-2901 · Openbsd · Openbsd

Published 2002-12-31 · Updated 2008-09-05 · CVE-2002-2188

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: OpenBSD versions prior to 3.2

Description: The issue allows local users to cause a denial of service, resulting in a kernel crash. This can be achieved by making a call to getrlimit(2) with invalid arguments, which may be related to an integer signedness error.

Recommendations: For versions prior to 3.2, update to version 3.2 or later to resolve the issue.

Fix

Related Identifiers

CVE-2002-2188

Affected Products

Openbsd

References · 6

• http://iss.net/security_center/static/10572.php · Patch
• http://openbsd.org/errata30.html#kernresource · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2002-2188 · Security Note
• http://securityfocus.com/bid/6124 · Patch
• ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/018_kernresource.patch · Patch
• http://openbsd.org/errata31.html#kernresource · Patch