The asynchronous I/O facility in 4.4 BSD kernel does not check user credentials when setting the recipient of I/O notification, which allows local users to cause a denial of service by using certain ioctl and fcntl calls to cause the signal to be sent to an arbitrary process ID.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2024-08-01T17:02:53.762Z

Reserved: 2001-08-31T00:00:00

Link: CVE-1999-1214

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 1997-09-15T04:00:00.000

Modified: 2025-04-03T01:03:51.193

Link: CVE-1999-1214

cve-icon Redhat

No data.