Unscored CVE-2002-2180 EUVD-2002-2159GHSA-fqm4-g2w4-w349

The setitimer(2) system call in OpenBSD 2.0 through 3.1 does not properly check certain arguments, which allows local users to write to ker…

Published Nov 16, 2005 · Updated Sep 16, 2024 · Assigned by mitre

Description

The setitimer(2) system call in OpenBSD 2.0 through 3.1 does not properly check certain arguments, which allows local users to write to kernel memory and possibly gain root privileges, possibly via an integer signedness error.

References

20021002 Incorrect argument checking in the setitimer(2) system call may allow an attacker to write to kernel memory. vendor-advisory
openbsd-setitimer-memory-overwrite(10278) vdb-entry
5861 vdb-entry