FreeBSD Scheduler Policy Local Denial of Service Vulnerability

Bugtraq ID:	20517
Class:	Access Validation Error
CVE:
Remote:	No
Local:	Yes
Published:	Oct 13 2006 12:00AM
Updated:	Oct 13 2006 09:29PM
Credit:	Diane Bruce <[email protected]> reported this issue to the vendor.
Vulnerable:	FreeBSD FreeBSD 6.0 -STABLE FreeBSD FreeBSD 6.0 -RELEASE FreeBSD FreeBSD 5.5 -STABLE FreeBSD FreeBSD 5.5 -RELEASE FreeBSD FreeBSD 6.1 -STABLE FreeBSD FreeBSD 6.1 -RELEASE-p10 FreeBSD FreeBSD 6.1 -RELEASE
Not Vulnerable:

FreeBSD Scheduler Policy Local Denial of Service Vulnerability

FreeBSD is prone to a local denial-of-service vulnerability because the kernel fails to require superuser privileges to perform a sensitive operation.

An attacker may leverage this issue to consume all CPU resources, denying service to legitimate users.

FreeBSD versions 5.5-RELEASE through 6.0-RELEASE-p10 are vulnerable to this issue; previous versions may also be affected.

FreeBSD Scheduler Policy Local Denial of Service Vulnerability

An exploit is available.

• /data/vulnerabilities/exploits/20517.c

FreeBSD Scheduler Policy Local Denial of Service Vulnerability

Solution:
FreeBSD has committed fixes to its CVS repository as of 21 May, 2006. The RELENG_6 branch has had this fix since 3 Aug, 2006.

FreeBSD Scheduler Policy Local Denial of Service Vulnerability

References:

• CVS log for src/sys/posix4/p1003_1b.c (FreeBSD)
  
• FreeBSD Homepage (FreeBSD)