VULNERABILITY INTELLIGENCE

CVE-2002-1490

CVSS score2.1 LOW
EPSS probability0.33%
CISA KEVNot currently listed
Published2003-04-02
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:N/I:N/A:P

Description

NetBSD 1.4 through 1.6 beta allows local users to cause a denial of service (kernel panic) via a series of calls to the TIOCSCTTY ioctl, which causes an integer overflow in a structure counter and sets the counter to zero, which frees memory that is still in use by other processes.

Primary references