CVE-1999-1314: Low severity FreeBSD FreeBSD vulnerability
Vulnerability in union file system in FreeBSD 2.2 and earlier, and possibly other operating systems, allows local users to cause a denial of service (system reload) via a series of certain mountunion commands.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
FreeBSD union file systemfrom your environment.Uninstall or avoid loading the union file system component on affected systems if it is not needed.
- Configuration
Disable union file system support if not required. Remove or do not load the unionfs kernel module or rebuild the kernel without unionfs to prevent mount_union operations.
FreeBSD union file system unionfs_enabled = false - Compensating control
Prevent untrusted local users from invoking mount_union or related mount operations. Restrict execution to trusted administrators (for example, remove execute/setuid bits or enforce access via sudoers/ACLs) to limit exposure until a vendor fix is applied.
- Operational
Monitor FreeBSD vendor advisories for patches addressing the union file system vulnerability and apply vendor-supplied fixes when they become available. Until patched, continue to monitor for unexpected system reloads or crashes that may indicate exploitation.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1314?
CVE-1999-1314 is classified as a denial of service vulnerability that can affect the system's stability.
How do I fix CVE-1999-1314?
To mitigate CVE-1999-1314, upgrade to a version of FreeBSD that is newer than 2.2.
Who is affected by CVE-1999-1314?
Local users of FreeBSD versions 2.2 and earlier are affected by CVE-1999-1314.
What can an attacker do using CVE-1999-1314?
An attacker can execute a series of mount_union commands to cause a system reload, leading to a denial of service.
Is CVE-1999-1314 specific to FreeBSD?
Yes, CVE-1999-1314 specifically affects FreeBSD operating systems and potentially other Unix-like systems with similar vulnerabilities.