CVE-2006-5218

2006-10-0922:00:00

mitre

www.cve.org

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

25.6%

JSON

Integer overflow in the systrace_preprepl function (STRIOCREPLACE) in systrace in OpenBSD 3.9 and NetBSD 3 allows local users to cause a denial of service (crash), gain privileges, or read arbitrary kernel memory via large numeric arguments to the systrace ioctl.

References

openbsd.org/errata.html#systrace

scary.beasts.org/security/CESA-2006-003.html

secunia.com/advisories/22324

securitytracker.com/id?1017009

www.osvdb.org/29570

www.securityfocus.com/bid/20392

exchange.xforce.ibmcloud.com/vulnerabilities/29392