CVE-1999-1214

CVSS 2.0 Score 2.1 of 10 (low)

Details

Published Sep 15, 1997
Updated: Nov 20, 2024
CWE ID 255

Summary

CVE-1999-1214 is a vulnerability affecting the asynchronous I/O facility in the 4.4 BSD kernel. This issue allows local users to cause a denial of service by manipulating certain ioctl and fcntl calls. The kernel fails to verify user credentials when setting the recipient of I/O notifications, allowing the signal to be sent to an arbitrary process ID. This vulnerability can be exploited to disrupt system services or cause unwanted behavior. Local attackers can take advantage of this flaw to impact system stability and availability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • SGI IRAX
  • BSD BSD
  • NetBSD
  • OpenBSD

Affected Vendors

  • OpenBSD Project
  • Netbsd
  • Blue State Digital
  • Saskatchewan Government Insurance