Vulnerability Details CVE-2009-2649
The IATA (ata) driver in FreeBSD 6.0 and 8.0, when read access to /dev is available, allows local users to cause a denial of service (kernel panic) via a certain IOCTL request with a large count, which triggers a malloc call with a large value.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 26.1%
CVSS Severity
CVSS v2 Score 4.7
Products affected by CVE-2009-2649
-
cpe:2.3:o:freebsd:freebsd:6.0
-
cpe:2.3:o:freebsd:freebsd:8.0