Description
The copy functions in locore.s such as copyout in OpenBSD 3.5 and 3.6, and possibly other BSD based operating systems, may allow attackers to exceed certain address boundaries and modify kernel memory.
References
- 20050228 011: SECURITY FIX: February 28, 2005 i386 only vendor-advisory
- 1013333 vdb-entry
- 20050228 028: SECURITY FIX: February 28, 2005 vendor-advisory
- 12825 vdb-entry
- 14432 third-party-advisory
- openbsd-copy-functions(19531) vdb-entry