CVE-2008-0384: OpenBSD 4.2 allows local users to cause a denial of service (kernel panic) by calling the SIOCGIFRTLABEL IO...

Security readout for executives and security teams

CVE-2008-0384 is a local denial-of-service issue in OpenBSD 4.2. A local user can trigger a kernel panic through a network-interface ioctl when no route label exists. The business impact is system outage, not data theft, based on the supplied sources. Exposure appears limited to OpenBSD 4.2 systems where untrusted or low-privileged local users can invoke the affected ioctl path. Internet-facing exposure is not indicated by the supplied sources. Prioritize remediation on shared or multi-user OpenBSD 4.2 systems. Single-purpose appliances with no untrusted local access are lower urgency, but the release age makes retirement or upgrade the cleaner risk decision. Mitigation focus: Apply OpenBSD 4.2 errata 005 from the vendor advisory.; Move legacy OpenBSD 4.2 systems to a vendor-supported release.; Restrict local shell access to trusted users where patching is delayed..

Prepared

Jun 28, 2026, 19:27 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.