OpenBSD ELF Executable Local Denial of Service Vulnerability

Bugtraq ID:	70719
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	Oct 24 2014 12:00AM
Updated:	Oct 24 2014 12:00AM
Credit:	Alejandro Hernández
Vulnerable:	OpenBSD OpenBSD 2.9 OpenBSD OpenBSD 2.8 OpenBSD OpenBSD 2.7 OpenBSD OpenBSD 2.6 OpenBSD OpenBSD 2.5 OpenBSD OpenBSD 2.4 OpenBSD OpenBSD 2.3 OpenBSD OpenBSD 2.2 OpenBSD OpenBSD 2.1 OpenBSD OpenBSD 2.0 OpenBSD OpenBSD 4.7 OpenBSD OpenBSD 4.6 OpenBSD OpenBSD 4.5 OpenBSD OpenBSD 4.4 OpenBSD OpenBSD 4.3 OpenBSD OpenBSD 4.2 OpenBSD OpenBSD 4.1 OpenBSD OpenBSD 4.0 OpenBSD OpenBSD 3.9 OpenBSD OpenBSD 3.8 OpenBSD OpenBSD 3.7 OpenBSD OpenBSD 3.6 OpenBSD OpenBSD 3.5 OpenBSD OpenBSD 3.4 OpenBSD OpenBSD 3.3 OpenBSD OpenBSD 3.2 OpenBSD OpenBSD 3.1 OpenBSD OpenBSD 3.0
Not Vulnerable:

OpenBSD ELF Executable Local Denial of Service Vulnerability

OpenBSD is prone to a local denial-of-service vulnerability.

Attackers can exploit this issue to trigger a kernel panic, denying service to legitimate users.

OpenBSD 5.5 and earlier versions are vulnerable.

OpenBSD ELF Executable Local Denial of Service Vulnerability

An attacker can exploit this issue through readily available tools.

The following example proof-of-concept is available:

• /data/vulnerabilities/exploits/70719.c

OpenBSD ELF Executable Local Denial of Service Vulnerability

References:

• OpenBSD Homepage (OpenBSD)