CVE-2002-0973

Published Aug 23, 2002 CVSS 2.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Description
Integer signedness error in several system calls for FreeBSD 4.6.1 RELEASE-p10 and earlier may allow attackers to access sensitive kernel memory via large negative values to the (1) accept, (2) getsockname, and (3) getpeername system calls, and the (4) vesa FBIO_GETPALETTE ioctl.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2002-0962 Integer signedness error in several system calls for FreeBSD 4.6.1 RELEASE-p10 and earlier may allow attackers to access sensitive kernel memory via large negative values to the (1) accept, (2) getsockname, and (3) getpeername system calls, and the (4) vesa FBIO_GETPALETTE ioctl.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 8, 2024, 3:12 AM
Reserved
Aug 21, 2002, 12:00 AM
Status
Modified
Published
Sep 24, 2002, 4:00 AM
Modified
Jun 16, 2026, 9:58 PM