CVE

Id
40962  
CVE No.
CVE-2009-3527  
Status
Candidate  
Description
Race condition in the Pipe (IPC) close function in FreeBSD 6.3 and 6.4 allows local users to cause a denial of service (crash) or gain privileges via vectors related to kqueues, which triggers a use after free, leading to a NULL pointer dereference or memory corruption.  
Phase
Assigned (20091002)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
448497 40962 CVE-2009-3527 BUGTRAQ:20090913 Re: [Full-disclosure] FreeBSD <= 6.1 kqueue() NULL pointer dereference  View
448498 40962 CVE-2009-3527 URL:http://www.securityfocus.com/archive/1/506449  View
448499 40962 CVE-2009-3527 FREEBSD:FreeBSD-SA-09:13  View
448500 40962 CVE-2009-3527 URL:http://security.freebsd.org/advisories/FreeBSD-SA-09:13.pipe.asc  View
448501 40962 CVE-2009-3527 BID:36375  View
448502 40962 CVE-2009-3527 URL:http://www.securityfocus.com/bid/36375  View
448503 40962 CVE-2009-3527 OSVDB:58544  View
448504 40962 CVE-2009-3527 URL:http://osvdb.org/58544  View
448505 40962 CVE-2009-3527 SECTRACK:1022982  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
45372 JVNDB-2009-006379 Universe CMS の vnews.php における SQL インジェクションの脆弱性 Universe CMS の vnews.php には、SQL インジェクションの脆弱性が存在します。 CVE-2009-3531 40962 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-006379.html  View