PT-2009-5855 · Openbsd · Openbsd

Slava Pestov · Published 2009-10-06 · Updated 2009-10-08 · CVE-2009-3572

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions OpenBSD versions 4.4 through 4.6

Description The issue allows local users to cause a denial of service, resulting in a kernel panic, due to improper handling of XMM exceptions when running on an i386 kernel.

Recommendations For versions 4.4 through 4.6, consider applying a kernel patch or updating the kernel to handle XMM exceptions properly to prevent denial of service attacks.

Fix

Related Identifiers

CVE-2009-3572

Affected Products

Openbsd

References · 7

• http://secunia.com/advisories/36956 · Vendor Advisory
• http://openbsd.org/errata44.html · Vendor Advisory
• http://openbsd.org/errata46.html · Vendor Advisory
• http://openbsd.org/errata45.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-3572 · Security Note
• http://marc.info/?l=openbsd-security-announce&m=125474331811594 · Patch
• http://securityfocus.com/bid/36589 · Patch