Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Integer signedness error in select() on OpenBSD 3.1 and earlier allows local users to overwrite arbitrary kernel memory via a negative value for the size parameter, which satisfies the boundary check as a signed integer, but is later used as an unsigned integer during a data copying operation.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OpenBSD select系统调用本地缓冲区溢出漏洞
Vulnerability Description
OpenBSD是加拿大OpenBSD项目组开发的一套跨平台的、基于BSD的类UNIX操作系统。 OpenBSD的select调用对缓冲边界缺少正确检查，本地攻击者可以利用这个漏洞进行缓冲区溢出攻击。 select调用中不充分的缓冲区边界检查允许攻击者覆盖内核内存，并以内核权限执行任意代码。 传统情况下，select系统调用的大小参数定义为一个有符号整数，这样内核会以有符号整数的范围来检查边界缓冲区长度，因此当攻击者使用负数时就会绕过边界检查。然而当内核为select系统调用从用户空间拷贝数据时，其大小却是
CVSS Information
N/A
Vulnerability Type
N/A