Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2002-1420
7.2
HIGHCVSS v2
Published
April 11, 2003
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Integer signedness error in select() on OpenBSD 3.1 and earlier allows local users to overwrite arbitrary kernel memory via a negative value for the size parameter, which satisfies the boundary check as a signed integer, but is later used as an unsigned integer during a data copying operation.
libressl/openbsd
GitHubSource code pulled from OpenBSD for LibreSSL - this includes most of the library and supporting code. The place to contribute to this code is via the OpenBSD CVS tree. Please mail patches to [email protected], instead of submitting pull requests, since this tree is often rebased.
GitHubSource code pulled from OpenBSD for LibreSSL - this includes most of the library and supporting code. The place to contribute to this code is via the OpenBSD CVS tree. Please mail patches to [email protected], instead of submitting pull requests, since this tree is often rebased.= 3.1, = 3.0NVD