OpenBSD Pipe VFS Race Condition Denial Of Service Vulnerability
BID:2818
Info
OpenBSD Pipe VFS Race Condition Denial Of Service Vulnerability
| Bugtraq ID: | 2818 |
| Class: | Race Condition Error |
| CVE: |
CVE-2001-1047 |
| Remote: | No |
| Local: | Yes |
| Published: | Jun 02 2001 12:00AM |
| Updated: | Jul 11 2009 06:06AM |
| Credit: | This vulnerability was announced to Bugtraq by Alexander Viro <[email protected]> on June 2, 2001. |
| Vulnerable: |
OpenBSD OpenBSD 2.9 OpenBSD OpenBSD 2.8 OpenBSD OpenBSD 2.7 OpenBSD OpenBSD 2.6 |
| Not Vulnerable: | |
Discussion
OpenBSD Pipe VFS Race Condition Denial Of Service Vulnerability
OpenBSD is a BSD based operating system maintained and distributed by the OpenBSD project. OpenBSD has been designed as a secure implementation of the BSD Operating System, and offers numerous security features.
A problem in the kernel could make it possible for a local user to cause a kernel panic. A thread within a process may open a pipe, creating two file descriptors. It is possible for another thread to set one of the file descriptors to null, causing a kernel panic when the blocking process dereferences the file descriptors used for the pipe.
Therefore, it possible for a local user to cause a kernel panic, thus denying service to legitmate users of the system.
OpenBSD is a BSD based operating system maintained and distributed by the OpenBSD project. OpenBSD has been designed as a secure implementation of the BSD Operating System, and offers numerous security features.
A problem in the kernel could make it possible for a local user to cause a kernel panic. A thread within a process may open a pipe, creating two file descriptors. It is possible for another thread to set one of the file descriptors to null, causing a kernel panic when the blocking process dereferences the file descriptors used for the pipe.
Therefore, it possible for a local user to cause a kernel panic, thus denying service to legitmate users of the system.
Exploit / POC
OpenBSD Pipe VFS Race Condition Denial Of Service Vulnerability
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
OpenBSD Pipe VFS Race Condition Denial Of Service Vulnerability
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
OpenBSD Pipe VFS Race Condition Denial Of Service Vulnerability
References:
References: