|
|
OpenBSD select() Buffer Overflow Vulnerability
A buffer-overflow vulnerability has been reported for the 'select(2)' function. This function lets programmers examine I/O descriptors. The size parameter for the 'select()' function is a signed integer. Reportedly, 'select()' evaluates the upper boundary checks in a signed context. As a result, an attacker can cause the kernel to overwrite arbitrary locations in memory when supplying 'select()' with certain negative values for the size parameter. |
|
Privacy Statement |