Vulnerability Description
The 4BSD process scheduler in the FreeBSD kernel performs scheduling based on CPU billing gathered from periodic process sampling ticks, which allows local users to cause a denial of service (CPU consumption) by performing voluntary nanosecond sleeps that result in the process not being active during a clock interrupt, as described in "Secretly Monopolizing the CPU Without Superuser Privileges."
CVSS Score
LOW
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Freebsd | Freebsd | All versions |
References
- http://osvdb.org/39599
- http://www.cs.huji.ac.il/~dants/papers/Cheat07Security.pdf
- http://osvdb.org/39599
- http://www.cs.huji.ac.il/~dants/papers/Cheat07Security.pdf
FAQ
What is CVE-2007-3722?
CVE-2007-3722 is a vulnerability with a CVSS score of 2.1 (LOW). The 4BSD process scheduler in the FreeBSD kernel performs scheduling based on CPU billing gathered from periodic process sampling ticks, which allows local users to cause a denial of service (CPU cons...
How severe is CVE-2007-3722?
CVE-2007-3722 has been rated LOW with a CVSS base score of 2.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2007-3722?
Check the references section above for vendor advisories and patch information. Affected products include: Freebsd Freebsd.