CVE-2008-0384

CVE-2008-0384 · MEDIUM Severity

AV:L/AC:L/AU:N/C:N/I:N/A:C

OpenBSD 4.2 allows local users to cause a denial of service (kernel panic) by calling the SIOCGIFRTLABEL IOCTL on an interface that does not have a route label, which triggers a NULL pointer dereference when the return value from the rtlabel_id2name function is not checked.

Learn more about our User Device Pen Test.