CVE-2000-0489: Freebsd

Low severity, CVSS 2.1. EPSS: 0.7% chance of exploitation in the next 30 days.

FreeBSD, NetBSD, and OpenBSD allow an attacker to cause a denial of service by creating a large number of socket pairs using the socketpair function, setting a large buffer size via setsockopt, then writing large buffers.

Affected products

  • Freebsd Freebsd: version 3.0 only; version 3.1 only; version 3.2 only; version 3.3 only; version 3.4 only; version 3.5 only; …
  • Netbsd Netbsd: version 1.4 only; version 1.4.1 only; version 1.4.2 only
  • OpenBSD OpenBSD: version 2.5 only; version 2.6 only; version 2.7 only

Published 1999-09-05. Last modified 2026-06-16.