VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Sep 15, 1997· Updated Apr 16, 2026

CVE-1999-1214

CVE-1999-1214

Description

The asynchronous I/O facility in 4.4 BSD kernel does not check user credentials when setting the recipient of I/O notification, which allows local users to cause a denial of service by using certain ioctl and fcntl calls to cause the signal to be sent to an arbitrary process ID.

Affected products

6
  • Bsd/Bsd2 versions
    cpe:2.3:o:bsd:bsd:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:bsd:bsd:*:*:*:*:*:*:*:*
    • cpe:2.3:o:bsd:bsd:4.4:*:*:*:*:*:*:*
  • FreeBSD/FreeBSD
    cpe:2.3:o:freebsd:freebsd:6.2:stable:*:*:*:*:*:*
  • NetBSD/NetBSD
    cpe:2.3:o:netbsd:netbsd:2.0.4:*:*:*:*:*:*:*
  • OpenBSD/OpenBSD
    cpe:2.3:o:openbsd:openbsd:2.1:*:*:*:*:*:*:*
  • Sgi/Irix
    cpe:2.3:o:sgi:irix:*:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

3

News mentions

0

No linked articles in our index yet.