NetBSD contains a flaw that may allow a local denial of service. The issue is triggered when the elf_load_file() function dereferences a NULL pointer. The NULL pointer dereference occurs when a malicious user creates an elf interpreter that lacks a PT_LOAD section in its header. This will result in loss of availability for the platform.
Classification
Location:
Local Access Required
Attack Type:
Denial of Service,
Input Manipulation
Impact:
Loss of Availability
Solution
Obtain fixed kernel sources, rebuild and install the new kernel, and reboot the system.
The fixed source may be obtained from the NetBSD CVS repository.
