CVE-2001-1559: Null Pointer Dereference
Published Dec 31, 2001
·Updated
The uipc system calls (uipcsyscalls.c) in OpenBSD 2.9 and 3.0 provide user mode return instead of versus rval kernel mode values to the fdrelease function, which allows local users to cause a denial of service and trigger a null dereference.
Affected Software
2 affected components
OpenBSD OpenBSD=2.9
OpenBSD OpenBSD=3.0
Event History
Dec 31, 2001
CVE Published
05:00 AM
Jul 14, 2005
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2001-1559?
CVE-2001-1559 is classified as a denial of service vulnerability.
2
How do I fix CVE-2001-1559?
To fix CVE-2001-1559, update your OpenBSD system to a version later than 3.0.
3
Which OpenBSD versions are affected by CVE-2001-1559?
CVE-2001-1559 affects OpenBSD versions 2.9 and 3.0.
4
What kind of attack does CVE-2001-1559 facilitate?
CVE-2001-1559 allows local users to trigger a null dereference leading to a denial of service.
5
Is CVE-2001-1559 a remote or local vulnerability?
CVE-2001-1559 is a local vulnerability that can be exploited by local users.