CVE-2002-1420: High severity OpenBSD OpenBSD vulnerability
Integer signedness error in select() on OpenBSD 3.1 and earlier allows local users to overwrite arbitrary kernel memory via a negative value for the size parameter, which satisfies the boundary check as a signed integer, but is later used as an unsigned integer during a data copying operation.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-1420?
CVE-2002-1420 is rated as a high-severity vulnerability due to its potential for local users to overwrite kernel memory.
How do I fix CVE-2002-1420?
To fix CVE-2002-1420, upgrade to a version of OpenBSD later than 3.1 where the vulnerability has been addressed.
Who is affected by CVE-2002-1420?
CVE-2002-1420 affects local users of OpenBSD versions 3.1 and earlier.
What type of vulnerability is CVE-2002-1420?
CVE-2002-1420 is classified as an integer signedness error leading to potential privilege escalation.
What are the consequences of exploiting CVE-2002-1420?
Exploiting CVE-2002-1420 could allow a local user to gain elevated privileges by overwriting arbitrary memory in the kernel.