OpenBSD Security Update Fixes Multiple Denial of Service Vulnerabilities

Two vulnerabilities have been identified in OpenBSD, which could be exploited by malicious users to cause a denial of service. The first issue is caused by memory leak errors in the "pf_insert_state()" and "pf_detach_state()" [src/sys/net/pf.c] functions, which can lead to machine lockups. The second vulnerability is caused by a missing NULL pointer check in the "ifioctl()" [src/sys/net/if.c] and "rtinit()" [src/sys/net/route.c] functions when handling SIOCGIFRTLABEL ioctls, which could be exploited to panic the kernel, creating a denial of service condition....

Related Items