CVE-1999-0912: Low severity FreeBSD FreeBSD vulnerability
FreeBSD VFS cache (vfscache) allows local users to cause a denial of service by opening a large number of files.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Configure per-user or per-process limits on the number of open file descriptors to prevent local users from opening excessive numbers of files (which can trigger the vfs_cache denial-of-service). Implement via your system's resource limit configuration for users/processes.
FreeBSD kernel (vfs_cache) maximum open files per user/process = lower than default to prevent excessive open file usage - Compensating control
Restrict and harden local user access: disable or remove unneeded local accounts, limit who can log in interactively, and restrict privileged access to reduce the set of users able to exercise this local DoS vector.
- Operational
Deploy monitoring to detect processes with abnormally high numbers of open file descriptors, terminate or isolate offending processes, and restart impacted services or reboot the host if necessary to recover from a DoS condition.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0912?
CVE-1999-0912 is considered a denial of service vulnerability that can disrupt service availability.
How does CVE-1999-0912 affect FreeBSD systems?
CVE-1999-0912 allows local users to cause a denial of service by opening an excessive number of files, overwhelming the VFS cache.
How can I mitigate CVE-1999-0912 on my FreeBSD system?
To mitigate CVE-1999-0912, it is recommended to limit the number of file descriptors that local users can open.
Which versions of FreeBSD are affected by CVE-1999-0912?
CVE-1999-0912 affects FreeBSD versions 3.0, 3.1, and 3.2.
Is there a patch available for CVE-1999-0912?
Check the FreeBSD security advisories for any patches or updates that address CVE-1999-0912.