Unscored CVE-2003-1234 EUVD-2003-1224GHSA-2jv3-mh5v-j4w2

Integer overflow in the f_count counter in FreeBSD before 4.2 through 5.0 allows local users to cause a denial of service (crash) and possi…

Published Nov 16, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

Integer overflow in the f_count counter in FreeBSD before 4.2 through 5.0 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via multiple calls to (1) fpathconf and (2) lseek, which do not properly decrement f_count through a call to fdrop.

References

http://www.pine.nl/press/pine-cert-20030101.txt
20030106 PDS: Integer overflow in FreeBSD kernel mailing-list
20030106 PDS: Integer overflow in FreeBSD kernel mailing-list
20030107 FreeBSD Security Advisory FreeBSD-SA-02:44.filedesc mailing-list
6524 vdb-entry
1005898 vdb-entry
freebsd-kernel-integer-overflow(10993) vdb-entry
7821 third-party-advisory