VULNERABILITY INTELLIGENCE

CVE-2009-2194

CVSS score4.9 MEDIUM
EPSS probability0.40%
CISA KEVNot currently listed
Published2009-08-06
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:N/I:N/A:C

Description

Apple Mac OS X 10.5 before 10.5.8 does not properly share file descriptors over local sockets, which allows local users to cause a denial of service (system crash) by placing file descriptors in messages sent to a socket that has no receiver, related to a "synchronization issue."

Primary references