Race Condition Vulnerability in NetBSD TCP Servers
CVE-1999-0396

Currently unrated

Key Information:

Vendor

Netbsd

Status
Netbsd
OpenBSD
Vendor
CVE Published:
17 February 1999

What is CVE-1999-0396?

A race condition exists between the select() and accept() system calls within the TCP server implementation in NetBSD. This vulnerability can be exploited by remote attackers to trigger a denial of service, effectively causing the server to become unresponsive. By manipulating the timing of these calls, an attacker can disrupt normal service operations, leading to potential downtime and loss of availability for users.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-...
x_refsource_MISC

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.