The asynchronous I/O facility in 4.4 BSD kernel does not check user credentials when setting the recipient of I/O notification, which allows local users to cause a denial of service by using certain ioctl and fcntl calls to cause the signal to be sent to an arbitrary process ID.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2002-03-09T05:00:00

Updated: 2024-08-01T17:02:53.762Z

Reserved: 2001-08-31T00:00:00

Link: CVE-1999-1214

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 1997-09-15T04:00:00.000

Modified: 2017-10-10T01:29:04.310

Link: CVE-1999-1214

cve-icon Redhat

No data.