Lucene search
HistoryOct 10, 2006 - 4:06 a.m.
CVE-2006-5218
cve-2006-5218
systrace
integer overflow
openbsd
netbsd
denial of service
privilege escalation
kernel memory reading
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
7.2 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
25.8%
Integer overflow in the systrace_preprepl function (STRIOCREPLACE) in systrace in OpenBSD 3.9 and NetBSD 3 allows local users to cause a denial of service (crash), gain privileges, or read arbitrary kernel memory via large numeric arguments to the systrace ioctl.
Affected configurations
Node
netbsdnetbsdMatch3.0
ORopenbsdopenbsdMatch3.8
ORopenbsdopenbsdMatch3.9
| CPE | Name | Operator | Version |
|---|---|---|---|
| netbsd:netbsd | netbsd | eq | 3.0 |
| openbsd:openbsd | openbsd | eq | 3.8 |
| openbsd:openbsd | openbsd | eq | 3.9 |
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
7.2 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
25.8%
Related for CVE-2006-5218