| Vulnerability Name: | CCN-54036 | ||||||
| Published: | 2009-10-28 | ||||||
| Updated: | 2009-10-28 | ||||||
| Summary: | OpenBSD is vulnerable to a denial of service, caused by a NULL pointer dereference in the ip_ctloutput() and ip6_ctloutput() functions. By invoking the getsockopt() function, a local attacker with root privileges could exploit this vulnerability to crash the kernel. | ||||||
| CVSS v3 Severity: | 5.0 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H)
| ||||||
| CVSS v2 Severity: | 4.6 Medium (CCN CVSS v2 Vector: AV:L/AC:L/Au:S/C:N/I:N/A:C) 3.5 Low (CCN Temporal CVSS v2 Vector: AV:L/AC:L/Au:S/C:N/I:N/A:C/E:U/RL:TF/RC:C)
| ||||||
| Vulnerability Consequences: | Denial of Service | ||||||
| References: | Source: CCN Type: OpenBSD 4.4 errata 016: RELIABILITY FIX: October 28, 2009 Source: CCN Type: SA37190 OpenBSD "ip_ctloutput()" and "ip6_ctloutput()" NULL Pointer Dereference Source: CCN Type: OSVDB ID: 59720 OpenBSD ip_ctloutput() / ip6_ctloutput() NULL Dereference Local DoS Source: CCN Type: BID-36859 OpenBSD 'getsockopt(2)' NULL Pointer Dereference Remote Denial of Service Vulnerability Source: XF Type: UNKNOWN openbsd-ip6ctloutput-dos(54036) | ||||||
| Vulnerable Configuration: | Configuration CCN 1: Denotes that component is vulnerable | ||||||
| BACK | |||||||