Lucene search

MitreCVE-2009-3527

HistoryOct 06, 2009 - 10:30 p.m.

CVE-2009-3527

2009-10-0622:30:00

CWE-362

mitre

web.nvd.nist.gov

cve-2009-3527

race condition

pipe

ipc

close function

freebsd 6.3

freebsd 6.4

denial of service

gain privileges

kqueues

use after free

null pointer dereference

memory corruption

nvd

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.4

Confidence

High

EPSS

Percentile

10.3%

JSON

Race condition in the Pipe (IPC) close function in FreeBSD 6.3 and 6.4 allows local users to cause a denial of service (crash) or gain privileges via vectors related to kqueues, which triggers a use after free, leading to a NULL pointer dereference or memory corruption.

Affected configurations

Nvd

Node

freebsdfreebsdMatch6.3

freebsdfreebsdMatch6.4

VendorProductVersionCPE
freebsdfreebsd6.3cpe:2.3:o:freebsd:freebsd:6.3:*:*:*:*:*:*:*
freebsdfreebsd6.4cpe:2.3:o:freebsd:freebsd:6.4:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
freebsd	freebsd	6.3	cpe:2.3:o:freebsd:freebsd:6.3:::::::*
freebsd	freebsd	6.4	cpe:2.3:o:freebsd:freebsd:6.4:::::::*

References

osvdb.org/58544

security.freebsd.org/advisories/FreeBSD-SA-09:13.pipe.asc

www.securityfocus.com/archive/1/506449

www.securityfocus.com/bid/36375

www.securitytracker.com/id?1022982

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.4

Confidence

High

EPSS

Percentile

10.3%

JSON

Related for CVE-2009-3527