Vulnerability in Openbsd

CVE-2001-1047

Race condition in OpenBSD VFS allows local users to cause a denial of service (kernel panic) by (1) creating a pipe in one thread and causing another thread to set one of the file descriptors to NULL via a close, or (2) calling dup2 on a file descriptor in one process, then setting the descriptor to NULL via a close in another process that is created via rfork.

EPSS: 0.003 (18.9th percentile) — read the EPSS interpretation.

Affected products

  • Openbsd — versions 2.6, 2.7, 2.8
  • N/a — versions n/a

References