CVE-1999-1214
CVSS 2.0 Score 2.1 of 10 (low)
Details
Published Sep 15, 1997
Updated: Nov 20, 2024
CWE ID 255
Summary
CVE-1999-1214 is a vulnerability affecting the asynchronous I/O facility in the 4.4 BSD kernel. This issue permits local users to cause a denial of service by manipulating certain ioctl and fcntl calls. The kernel fails to verify user credentials when setting the recipient of I/O notifications, enabling attackers to arbitrarily send signals to any process ID. This vulnerability poses a serious threat to system stability and availability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- SGI IRAX
- BSD BSD
- NetBSD
- OpenBSD
Affected Vendors
- OpenBSD Project
- Netbsd
- Blue State Digital
- Saskatchewan Government Insurance