Lucene search

MitreCVE-2009-2649

HistoryJul 30, 2009 - 7:30 p.m.

CVE-2009-2649

2009-07-3019:30:00

CWE-264

mitre

web.nvd.nist.gov

freebsd

ata driver

denial of service

ioctl

cve-2009-2649

nvd

CVSS2

4.7

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:N/A:C

AI Score

6.3

Confidence

High

EPSS

Percentile

9.7%

JSON

The IATA (ata) driver in FreeBSD 6.0 and 8.0, when read access to /dev is available, allows local users to cause a denial of service (kernel panic) via a certain IOCTL request with a large count, which triggers a malloc call with a large value.

Affected configurations

Nvd

Node

freebsdfreebsdMatch6.0

freebsdfreebsdMatch8.0

VendorProductVersionCPE
freebsdfreebsd6.0cpe:2.3:o:freebsd:freebsd:6.0:*:*:*:*:*:*:*
freebsdfreebsd8.0cpe:2.3:o:freebsd:freebsd:8.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
freebsd	freebsd	6.0	cpe:2.3:o:freebsd:freebsd:6.0:::::::*
freebsd	freebsd	8.0	cpe:2.3:o:freebsd:freebsd:8.0:::::::*

References

www.securityfocus.com/bid/35645

www.securitytracker.com/id?1022538

www.exploit-db.com/exploits/9134

CVSS2

4.7

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:N/A:C

AI Score

6.3

Confidence

High

EPSS

Percentile

9.7%

JSON

Related for CVE-2009-2649