CVE-2009-2649

The IATA (ata) driver in FreeBSD 6.0 and 8.0, when read access to /dev is available, allows local users to cause a denial of service (kernel panic) via a certain IOCTL request with a large count, which triggers a malloc call with a large value.

Score

CVSS 2.0 4.7 Medium

Status

Modified - cve@mitre.org

Published

2009-07-30

Last modified

2024-08-07

Weaknesses

CWE-264

Affected products

• Freebsd (Freebsd)

References

• http://www.securityfocus.com/bid/35645
• http://www.securitytracker.com/id?1022538
• https://www.exploit-db.com/exploits/9134