Lucene search
HistoryJul 30, 2009 - 7:30 p.m.
CVE-2009-2649
freebsd
ata driver
denial of service
ioctl
cve-2009-2649
nvd
4.7 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:N/I:N/A:C
6.3 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.7%
The IATA (ata) driver in FreeBSD 6.0 and 8.0, when read access to /dev is available, allows local users to cause a denial of service (kernel panic) via a certain IOCTL request with a large count, which triggers a malloc call with a large value.
Affected configurations
Node
freebsdfreebsdMatch6.0
ORfreebsdfreebsdMatch8.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| freebsd:freebsd | freebsd | eq | 6.0 |
| freebsd:freebsd | freebsd | eq | 8.0 |
Related
prion
prion
Cross site request forgery (csrf)
2009-07-30 19:30:00
cvelist
cvelist
CVE-2009-2649
2009-07-30 19:00:00
seebug
seebug
FreeBSD IATA驱动本地拒绝服务漏洞
2009-07-31 00:00:00
nvd
nvd
CVE-2009-2649
2009-07-30 19:30:00
4.7 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:N/I:N/A:C
6.3 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.7%
Related for CVE-2009-2649