Lucene search
HistoryApr 03, 2006 - 10:04 a.m.
CVE-2006-1588
netbsd
if_bridge code
kernel memory
cve-2006-1588
nvd
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
6 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
The bridge ioctl (if_bridge code) in NetBSD 1.6 through 3.0 does not clear sensitive memory before copying ioctl results to the requesting process, which allows local users to obtain portions of kernel memory.
Affected configurations
Node
netbsdnetbsdMatch1.6
ORnetbsdnetbsdMatch1.6beta
ORnetbsdnetbsdMatch1.6.1
ORnetbsdnetbsdMatch1.6.2
ORnetbsdnetbsdMatch2.0
ORnetbsdnetbsdMatch2.0.1
ORnetbsdnetbsdMatch2.0.2
ORnetbsdnetbsdMatch2.0.3
ORnetbsdnetbsdMatch2.1
ORnetbsdnetbsdMatch3.0
Related
cvelist
cvelist
CVE-2006-1588
2006-04-03 10:00:00
nvd
nvd
CVE-2006-1588
2006-04-03 10:04:00
prion
prion
Design/Logic Flaw
2006-04-03 10:04:00
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
6 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2006-1588