CVE-2007-3654: Input Validation
Published Sep 17, 2007
·Updated
The display driver allocattr functions in NetBSD 3.0 through 4.0BETA2, and NetBSD-current before 20070728, allow local users to cause a denial of service (panic) via a (1) negative or (2) large value in an ioctl call, as demonstrated by the vgaallocattr function.
Affected Software
4 affected components
NetBSD NetBSD=3.0
NetBSD NetBSD=3.0.1
NetBSD NetBSD=3.0.2
NetBSD NetBSD=4.0-beta2
Event History
Sep 17, 2007
CVE Published
05:17 PM
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-3654?
CVE-2007-3654 has a moderate severity rating as it can cause a denial of service through system panic.
2
How do I fix CVE-2007-3654?
To fix CVE-2007-3654, you should upgrade to a patched version of NetBSD released after 20070728.
3
What versions of NetBSD are affected by CVE-2007-3654?
CVE-2007-3654 affects NetBSD versions 3.0, 3.0.1, 3.0.2, and 4.0_BETA2.
4
Can CVE-2007-3654 be exploited remotely?
CVE-2007-3654 is primarily a local vulnerability that requires local user access to exploit.
5
What impact does CVE-2007-3654 have on affected systems?
The impact of CVE-2007-3654 on affected systems is a possible crash or panic of the operating system.