Vulnerability Name: | CVE-2005-4782 (CCN-26387) | ||||||||
Assigned: | 2005-11-08 | ||||||||
Published: | 2005-11-08 | ||||||||
Updated: | 2008-09-05 | ||||||||
Summary: | NetBSD 2.0 before 2.0.4, 2.1 before 2.1.1, and 3, when the kernel is compiled with "options DIAGNOSTIC," allows local users to cause a denial of service (kernel assertion panic) via a negative linger time in the SO_LINGER socket option. | ||||||||
CVSS v3 Severity: | 5.0 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H)
| ||||||||
CVSS v2 Severity: | 4.9 Medium (CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C)
| ||||||||
Vulnerability Type: | CWE-Other | ||||||||
Vulnerability Consequences: | Denial of Service | ||||||||
References: | Source: MITRE Type: CNA CVE-2005-4782 Source: CONFIRM Type: Patch http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/kern/uipc_socket.c.diff?r1=1.111&r2=1.112 Source: CCN Type: NetBSD Security Advisory 2005-012: 11/08/2005 10:00:45 SO_LINGER argument checking DIAGNOSTIC panic Source: NETBSD Type: Patch NetBSD-SA2005-012 Source: MLIST Type: Patch [source-changes] 20051021 CVS commit: src/sys/kern Source: CCN Type: OSVDB ID: 20758 NetBSD SO_LINGER Socket Option Negative Value Local DoS Source: BID Type: UNKNOWN 15289 Source: CCN Type: BID-15289 NetBSD SO_LINGER DIAGNOSTIC Checking Local Denial of Service Vulnerability Source: XF Type: UNKNOWN netbsd-solinger-dos(26387) | ||||||||
Vulnerable Configuration: | Configuration 1: Configuration CCN 1: Denotes that component is vulnerable | ||||||||
BACK |