ID CVE-2009-3572
Summary OpenBSD 4.4, 4.5, and 4.6, when running on an i386 kernel, does not properly handle XMM exceptions, which allows local users to cause a denial of service (kernel panic) via unspecified vectors. Per: http://marc.info/?l=openbsd-security-announce&m=125474331811594 XMM exceptions are incorrectly handled in the OpenBSD/i386 kernel, resulting in a kernel panic that can be triggered by a local user. This issue has been fixed in -current. Source code patches are available for OpenBSD 4.4, 4.5 and 4.6.
References
Vulnerable Configurations
  • cpe:2.3:o:openbsd:openbsd:4.4:*:*:*:*:*:*:*
    cpe:2.3:o:openbsd:openbsd:4.4:*:*:*:*:*:*:*
  • cpe:2.3:o:openbsd:openbsd:4.5:*:*:*:*:*:*:*
    cpe:2.3:o:openbsd:openbsd:4.5:*:*:*:*:*:*:*
  • cpe:2.3:o:openbsd:openbsd:4.6:*:*:*:*:*:*:*
    cpe:2.3:o:openbsd:openbsd:4.6:*:*:*:*:*:*:*
CVSS
Base: 4.9 (as of 08-10-2009 - 04:00)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE COMPLETE
cvss-vector via4 AV:L/AC:L/Au:N/C:N/I:N/A:C
refmap via4
bid 36589
mlist [openbsd-security-announce] 20091005 OpenBSD patch: XMM exceptions incorrectly handled in i386 kernel
openbsd
  • [4.4] 015: RELIABILITY FIX: October 05, 2009
  • [4.5] 008: RELIABILITY FIX: October 05, 2009
  • [4.6] 002: RELIABILITY FIX: October 05, 2009
secunia 36956
Last major update 08-10-2009 - 04:00
Published 06-10-2009 - 20:30
Last modified 08-10-2009 - 04:00
Back to Top