CVE-2007-3722: Low severity FreeBSD FreeBSD vulnerability
The 4BSD process scheduler in the FreeBSD kernel performs scheduling based on CPU billing gathered from periodic process sampling ticks, which allows local users to cause a denial of service (CPU consumption) by performing voluntary nanosecond sleeps that result in the process not being active during a clock interrupt, as described in "Secretly Monopolizing the CPU Without Superuser Privileges."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-3722?
CVE-2007-3722 has a moderate severity level due to its potential to cause denial of service through CPU resource exhaustion.
How do I fix CVE-2007-3722?
To fix CVE-2007-3722, upgrade to the latest version of FreeBSD that has addressed this scheduling vulnerability.
Who is affected by CVE-2007-3722?
Local users on systems running the FreeBSD kernel are affected by CVE-2007-3722.
What type of attack is represented by CVE-2007-3722?
CVE-2007-3722 represents a denial of service attack through excessive CPU consumption caused by specially crafted process sleep requests.
Is CVE-2007-3722 easy to exploit?
CVE-2007-3722 can be relatively easily exploited by local users who can manipulate process scheduling.