CVE-1999-1214

NONE EPSS 21.7%

Published Sep 15, 199728y ago · Modified Jun 16, 20262w ago

Published Sep 15, 1997 28y ago

Last Modified Jun 16, 2026 2w ago

Description

The asynchronous I/O facility in 4.4 BSD kernel does not check user credentials when setting the recipient of I/O notification, which allows local users to cause a denial of service by using certain ioctl and fcntl calls to cause the signal to be sent to an arbitrary process ID.

Threat Intelligence

EPSS Exploit Probability

21.7% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-255

Affected Products 6

Vendor	Product	Version	Range
sgi	irix	*	any
bsd	bsd	*	any
bsd	bsd	4.4	any
freebsd	freebsd	6.2	any
netbsd	netbsd	2.0.4	any
openbsd	openbsd	2.1	any

References 3

openbsd.com http://www.openbsd.com/advisories/signals.txt
osvdb.org http://www.osvdb.org/11062
exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/556

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.