CVE-1999-1214
CVSS 2.0 Score 2.1 of 10 (low)
Details
Published Sep 15, 1997
Updated: Nov 20, 2024
CWE ID 255
Summary
CVE-1999-1214 is a vulnerability affecting the asynchronous I/O facility in the 4.4 BSD kernel. This issue allows local users to cause a denial of service by manipulating certain ioctl and fcntl calls. The kernel fails to verify user credentials when setting the recipient of I/O notifications, allowing the signal to be sent to an arbitrary process ID. This vulnerability can be exploited to disrupt system services or cause unwanted behavior. Local attackers can take advantage of this flaw to impact system stability and availability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Products
- SGI IRAX
- BSD BSD
- NetBSD
- OpenBSD
Affected Vendors
- OpenBSD Project
- Netbsd
- Blue State Digital
- Saskatchewan Government Insurance