CVE-1999-1214: Bsd

Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days.

The asynchronous I/O facility in 4.4 BSD kernel does not check user credentials when setting the recipient of I/O notification, which allows local users to cause a denial of service by using certain ioctl and fcntl calls to cause the signal to be sent to an arbitrary process ID.

Affected products

• Bsd Bsd: any version; version 4.4 only
• Freebsd Freebsd: version 6.2 only
• Netbsd Netbsd: version 2.0.4 only
• OpenBSD OpenBSD: version 2.1 only
• Sgi Irix: any version

Published 1997-09-15. Last modified 2026-06-16.