CVE-2004-1323

NetBSD - Denial of Service via Large Signal Number in Compat Subsystem

Title source: llm
STIX 2.1

Description

Multiple syscalls in the compat subsystem for NetBSD before 2.0 allow local users to cause a denial of service (kernel crash) via a large signal number to (1) xxx_sys_kill, (2) xxx_sys_sigaction, and possibly other translation functions.

References (4)

Core 4
Core References
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/13501/
Patch, Vendor Advisory x_refsource_misc
http://gleg.net/advisory_netbsd2.shtml
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/18564
Vendor Advisory vendor-advisory x_refsource_netbsd
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-010.txt.asc

Scores

EPSS 0.0006
EPSS Percentile 20.1%

Details

Status published
Products (7)
netbsd/netbsd 1.5
netbsd/netbsd 1.5.1
netbsd/netbsd 1.5.2
netbsd/netbsd 1.5.3
netbsd/netbsd 1.6
netbsd/netbsd 1.6.1
netbsd/netbsd 1.6.2
Published Dec 16, 2004
Tracked Since Feb 18, 2026