NetBSD 'modctl()' Local Denial of Service Vulnerability

Bugtraq ID:	69475
Class:	Input Validation Error
CVE:
Remote:	No
Local:	Yes
Published:	Aug 27 2014 12:00AM
Updated:	Aug 27 2014 12:00AM
Credit:	Maxime Villard
Vulnerable:	NetBSD NetBSD 6.1.4 NetBSD NetBSD 6.1.3 NetBSD NetBSD 6.1.2 NetBSD NetBSD 6.1.1 NetBSD NetBSD 6.0.5 NetBSD NetBSD 6.0.4 NetBSD NetBSD 6.0.3 NetBSD NetBSD 6.0.2 NetBSD NetBSD 6.0.1 NetBSD NetBSD 5.2.2 NetBSD NetBSD 5.1.4 NetBSD NetBSD 5.1.2 NetBSD NetBSD 5.1.1 NetBSD NetBSD 6.1 NetBSD NetBSD 6.1 NetBSD NetBSD 6.0 Beta NetBSD NetBSD 6.0 NetBSD NetBSD 6.0 NetBSD NetBSD 5.2 NetBSD NetBSD 5.1
Not Vulnerable:

NetBSD 'modctl()' Local Denial of Service Vulnerability

The NetBSD is prone to a local denial-of-service vulnerability.

An Attacker can exploit this issue to trigger a kernel panic, resulting in a denial-of-service condition.

NetBSD 'modctl()' Local Denial of Service Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

NetBSD 'modctl()' Local Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

NetBSD 'modctl()' Local Denial of Service Vulnerability

References:

• NetBSD Homepage (NetBSD)
  
• NetBSD Security Advisory 2014-011: User-controlled memory allocation in the modc (NetBSD)
  
• NetBSD Security Advisory 2014-011 (NetBSD)