Null pointer dereference

The kernel in NetBSD-current before September 28, 2005 allows local users to cause a denial of service system crash by using the SIOCGIFALIAS ioctl to gather information on a non-existent alias of a network interface, which causes a NULL pointer dereference...

CVE-2006-1797

The kernel in NetBSD-current before September 28, 2005 allows local users to cause a denial of service system crash by using the SIOCGIFALIAS ioctl to gather information on a non-existent alias of a network interface, which causes a NULL pointer dereference...

CVE-2006-1814

NetBSD 1.6, 2.0, 2.1 and 3.0 allows local users to cause a denial of service memory exhaustion by using the sysctl system call to lock a large buffer into physical memory...

Code injection

NetBSD 1.6, 2.0, 2.1 and 3.0 allows local users to cause a denial of service memory exhaustion by using the sysctl system call to lock a large buffer into physical memory...

CVE-2006-1797

The CVE-2006-1797 entry describes a local denial-of-service in NetBSD-current kernels released before 28 September 2005. A local attacker can trigger a NULL pointer dereference by issuing the SIOCGIFALIAS ioctl to query information about a non-existent network alias, causing a system crash. The a...

CVE-2006-1814

CVE-2006-1814 affects NetBSD 1.6, 2.0, 2.1 and 3.0. Local users can cause a denial of service (memory exhaustion) by using the sysctl system call to lock a large buffer into physical memory. The connected documents provide the affected versions and the underlying cause (locking a large buffer via...

CVE-2006-1797

The kernel in NetBSD-current before September 28, 2005 allows local users to cause a denial of service system crash by using the SIOCGIFALIAS ioctl to gather information on a non-existent alias of a network interface, which causes a NULL pointer dereference...

CVE-2006-1814

NetBSD 1.6, 2.0, 2.1 and 3.0 allows local users to cause a denial of service memory exhaustion by using the sysctl system call to lock a large buffer into physical memory...

CVE-2005-4783

CVE-2005-4783 concerns NetBSD kernels where kernfs_xread in kernfs_vnops.c fails to check for a negative offset when reading the message buffer. This lack of validation allows local users to read arbitrary kernel memory. The description specifies impact as a local information disclosure, affectin...

CVE-2005-4782

NetBSD 2.0 before 2.0.4, 2.1 before 2.1.1, and 3, when the kernel is compiled with "options DIAGNOSTIC," allows local users to cause a denial of service kernel assertion panic via a negative linger time in the SOLINGER socket option...

CVE-2005-4782

The vulnerability CVE-2005-4782 affects NetBSD 2.0 (before 2.0.4), 2.1 (before 2.1.1), and 3, when the kernel is built with the DIAGNOSTIC option. The issue is a denial of service caused by a kernel assertion panic triggered by a negative linger time in the SO_LINGER socket option. Concretely, lo...

CVE-2005-4783

kernfsxread in kernfsvnops.c in NetBSD before 20050831 does not check for a negative offset when reading the message buffer, which allows local users to read arbitrary kernel memory...

CVE-2005-4776

CVE-2005-4776 describes an integer overflow in the NetBSD FreeBSD compatibility code (freebsd_misc.c) affecting NetBSD-current, NetBSD-3, NetBSD-2.0, and NetBSD-2 prior to 20050913, and NetBSD-1.6 prior to 20050914. This vulnerability could allow local users to cause a denial of service via heap ...

CVE-2005-4779

CVE-2005-4779 relates to NetBSD 2.0.2, where verifiedexecioctl in verified_exec.c calls NDINIT with UIO_USERSPACE instead of UID_SYSSPACE, removing the verified exec kernel subsystem functionality. This change, as documented, could allow local users to run Trojan horse programs. Multiple sources ...

CVE-2005-4779

verifiedexecioctl in verifiedexec.c in NetBSD 2.0.2 calls NDINIT with UIOUSERSPACE rather than UIDSYSSPACE, which removes the functionality of the verified exec kernel subsystem and might allow local users to execute Trojan horse programs...

[SA19616] NetBSD "sysctl()" Local Denial of Service Vulnerability

TITLE: NetBSD "sysctl" Local Denial of Service Vulnerability SECUNIA ADVISORY ID: SA19616 VERIFY ADVISORY: http://secunia.com/advisories/19616/ CRITICAL: Not critical IMPACT: DoS WHERE: Local system OPERATING SYSTEM: NetBSD 1.x http://secunia.com/product/255/ DESCRIPTION: A vulnerability has been...

[SA19585] NetBSD False Intel Hardware RNG Detection Security Issue

TITLE: NetBSD False Intel Hardware RNG Detection Security Issue SECUNIA ADVISORY ID: SA19585 VERIFY ADVISORY: http://secunia.com/advisories/19585/ CRITICAL: Less critical IMPACT: Security Bypass WHERE: From remote OPERATING SYSTEM: NetBSD 1.x http://secunia.com/product/255/ DESCRIPTION: A securit...

Multiple NetBSD security vulnerabilities

RNG generator non-random strem generation, DoS conditions...

[SA19615] NetBSD SIOCGIFALIAS "ioctl()" Denial of Service Vulnerability

TITLE: NetBSD SIOCGIFALIAS "ioctl" Denial of Service Vulnerability SECUNIA ADVISORY ID: SA19615 VERIFY ADVISORY: http://secunia.com/advisories/19615/ CRITICAL: Not critical IMPACT: DoS WHERE: Local system OPERATING SYSTEM: NetBSD 1.x http://secunia.com/product/255/ DESCRIPTION: A vulnerability ha...

CVE-2006-1646

The CVE-2006-1646 issue concerns the Internet Key Exchange version 1 (IKEv1) implementation (isakmp_agg.c) in the Shoichi Sakane KAME Project racoon, as used by NetBSD, certain FreeBSD releases, and potentially other BSD/Linux distributions. In aggressive mode, remote attackers can trigger a deni...