CVE-2008-0384: Null Pointer Dereference

Published Jan 22, 2008

Updated

OpenBSD 4.2 allows local users to cause a denial of service (kernel panic) by calling the SIOCGIFRTLABEL IOCTL on an interface that does not have a route label, which triggers a NULL pointer dereference when the return value from the rtlabelid2name function is not checked.

Affected Software

1 affected component

OpenBSD OpenBSD=4.2

Event History

Jan 22, 2008

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-0384?

CVE-2008-0384 has a severity rating that indicates it can lead to a denial of service through a kernel panic.

How do I fix CVE-2008-0384?

To fix CVE-2008-0384, you should upgrade OpenBSD to a patched version that addresses the vulnerability.

Who is affected by CVE-2008-0384?

CVE-2008-0384 affects local users of OpenBSD 4.2, specifically when calling the SIOCGIFRTLABEL IOCTL.

What is the impact of CVE-2008-0384?

The impact of CVE-2008-0384 is the potential for a kernel panic, which disrupts system operations.

When was CVE-2008-0384 disclosed?

CVE-2008-0384 was disclosed in early 2008, allowing users to be aware of the vulnerability and its implications.