CVE-2009-3527

2022-10-0316:23:54

mitre

www.cve.org

cve-2009-3527

race condition

ipc

denial of service

privileges

freebsd

kqueues

use after free

null pointer

memory corruption

6.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

16.1%

JSON

Race condition in the Pipe (IPC) close function in FreeBSD 6.3 and 6.4 allows local users to cause a denial of service (crash) or gain privileges via vectors related to kqueues, which triggers a use after free, leading to a NULL pointer dereference or memory corruption.