## Description

The asynchronous I/O facility in 4.4 BSD kernel does not check user credentials when setting the recipient of I/O notification, which allows local users to cause a denial of service by using certain ioctl and fcntl calls to cause the signal to be sent to an arbitrary process ID.

## Severity

Overall Severity: N/A

### CVSS Metrics

Type | Score | Severity | Vector
--- | --- | --- | ---

## Affected Products

### sgi - irix

Affected Versions:

- *

### bsd - bsd

Affected Versions:

- *

### bsd - bsd

Affected Versions:

- 4.4

### freebsd - freebsd

Affected Versions:

- 6.2

### netbsd - netbsd

Affected Versions:

- 2.0.4

### openbsd - openbsd

Affected Versions:

- 2.1

## References

- http://www.openbsd.com/advisories/signals.txt
- http://www.openbsd.com/advisories/signals.txt
- http://www.osvdb.org/11062
- https://exchange.xforce.ibmcloud.com/vulnerabilities/556
- http://www.openbsd.com/advisories/signals.txt
- http://www.openbsd.com/advisories/signals.txt
- http://www.osvdb.org/11062
- https://exchange.xforce.ibmcloud.com/vulnerabilities/556

Neural Processor Active