NetBSD up to 5.1.4/5.2.2/6.0.5/6.1.4 Compatibility Layer null pointer dereference

Summaryinfo

A vulnerability described as problematic has been identified in NetBSD up to 5.1.4/5.2.2/6.0.5/6.1.4. The affected element is an unknown function of the component Compatibility Layer. Such manipulation leads to null pointer dereference. There is not any exploit available. Upgrading the affected component is recommended.

Detailsinfo

A vulnerability was found in NetBSD up to 5.1.4/5.2.2/6.0.5/6.1.4 (Operating System). It has been rated as problematic. Affected by this issue is an unknown code block of the component Compatibility Layer. The manipulation with an unknown input leads to a null pointer dereference vulnerability. Using CWE to declare the problem leads to CWE-476. A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit. Impacted is availability.

The weakness was released 08/27/2014 by Christos Zoulas as NetBSD-SA2014-010 as confirmed advisory (Website). The advisory is shared for download at ftp.netbsd.org. The exploitation is known to be easy. The attack needs to be approached locally. No form of authentication is required for exploitation. There are neither technical details nor an exploit publicly available. The advisory points out:

Four compatibility layers are affected by several vulnerabilities (...) Each of them allows a local user to crash the system.

Upgrading eliminates this vulnerability. It is possible to mitigate the problem by applying the configuration setting Disable Compatibility Mode. The best possible mitigation is suggested to be upgrading to the latest version. A possible mitigation has been published immediately after the disclosure of the vulnerability. The advisory contains the following remark:

For all NetBSD versions, you need to obtain fixed kernel sources, rebuild and install the new kernel, and reboot the system.

The vulnerability is also documented in the databases at X-Force (95643) and SecurityFocus (BID 69476†). Entries connected to this vulnerability are available at VDB-67437 and VDB-67435. Once again VulDB remains the best source for vulnerability data.

Productinfo

Type

• Operating System

Name

• NetBSD

Version

• 5.1.0
• 5.1.1
• 5.1.2
• 5.1.3
• 5.1.4
• 5.2.0
• 5.2.1
• 5.2.2
• 6.0.0
• 6.0.1
• 6.0.2
• 6.0.3
• 6.0.4
• 6.0.5
• 6.1.0
• 6.1.1
• 6.1.2
• 6.1.3
• 6.1.4

License

• open-source

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion