SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2000-0489

FreeBSD, NetBSD, and OpenBSD allow an attacker to cause a denial of service by creating a large number of socket pairs using the socketpair function, setting a large buffer size via setsockopt, then writing large buffers.

LOW 2.1EPSS 0.70%

Does this matter?

Lower severity and a low EPSS score (0.70%). Track it; it rarely justifies an emergency change on its own.

Description

FreeBSD, NetBSD, and OpenBSD allow an attacker to cause a denial of service by creating a large number of socket pairs using the socketpair function, setting a large buffer size via setsockopt, then writing large buffers.

CVSS 2.0
2.1 LOWAV:L/AC:L/Au:N/C:N/I:N/A:P
EPSS
0.70% probability · 51th percentile
CISA KEV
Not listed
Affected
freebsd/freebsd · netbsd/netbsd · openbsd/openbsd
Source
cve@mitre.org

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.