EUVD-2007-3705

Malware in sbrugna...

Code injection

The ULE process scheduler in the FreeBSD kernel gives preference to "interactive" processes that perform voluntary sleeps, which allows local users to cause a denial of service CPU consumption, as described in "Secretly Monopolizing the CPU Without Superuser Privileges."...

CVE-2007-3721

The CVE-2007-3721 entry concerns the FreeBSD kernel’s ULE process scheduler, which favors “interactive” processes that issue voluntary sleeps. The underlying issue is that such prioritization can lead to local users causing CPU denial of service (PARTIAL availability impact) as described in the r...