Skip to content
Medium Published: Dec 31, 2001 Modified: Apr 03, 2025

CVE-2001-1559

5.5 CVSS Score Medium
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Export CVE-2001-1559 Data:
Share:
Link copied!

Description

The uipc system calls (uipc_syscalls.c) in OpenBSD 2.9 and 3.0 provide user mode return instead of versus rval kernel mode values to the fdrelease function, which allows local users to cause a denial of service and trigger a null dereference.

CVSS Vector Details

Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Affected Software Configurations

  • o openbsd openbsd 2.9 * * * * * * *
  • o openbsd openbsd 3.0 * * * * * * *

Weaknesses (CWE)

  • CWE-476

References & External Links

External Resources

NVD Official Record Exploit-DB Search Exploits CVE Details Statistics GitHub PoC / Tools X / Twitter Discussions Google Search More

Related Vulnerabilities

CVE-2002-0401 CVSS 7.5 Same weakness: CWE-476 CVE-2002-1912 CVSS 7.5 Same weakness: CWE-476 CVE-2003-1000 CVSS 7.5 Same weakness: CWE-476 CVE-2003-1013 CVSS 7.5 Same weakness: CWE-476 CVE-2004-0365 CVSS 7.5 Same weakness: CWE-476

CVE History Timeline

Sep 29, 2005 21:47 Initial Analysis
Feb 16, 2024 14:16 Reanalysis
May 14, 2024 01:20 CVE Modified
Nov 20, 2024 23:37 CVE Modified
← Back to CVE Tracker