full-disclosure - NetBSD kernel swapctl(2) vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <web-43718618@cgp.agava.net>
From: demidov at gleg.net (Evgeny Demidov)
Subject: NetBSD kernel swapctl(2) vulnerability

Name:          NetBSD kernel swapctl(2) vulnerability
Date:          11 June 2004
CVE candidate: not assigned
Author:        Evgeny Demidov

Description:

There exists a integer handling vulnerability in NetBSD 
swapctl(2) system call.
It seems that this vulnerability can not be exploited to 
gain super-user
privilegies, but any local attacker can crash the kernel.

Fix:

It is available in CVS: 
http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/uvm/uvm_swap.c.diff?r1=1.85&r2=1.85.2.1

History:

The vulnerability has been discovered several months ago 
by Evgeny Demidov during NetBSD kernel source code au
dit.
It has been made availabe to VulnDisco clients two months 
ago.