Input validation

The display driver allocattr functions in NetBSD 3.0 through 4.0BETA2, and NetBSD-current before 20070728, allow local users to cause a denial of service panic via a 1 negative or 2 large value in an ioctl call, as demonstrated by the vgaallocattr function...

CVE-2007-3654

The display driver allocattr functions in NetBSD 3.0 through 4.0BETA2, and NetBSD-current before 20070728, allow local users to cause a denial of service panic via a 1 negative or 2 large value in an ioctl call, as demonstrated by the vgaallocattr function...

CVE-2007-3654

The display driver allocattr functions in NetBSD 3.0 through 4.0BETA2, and NetBSD-current before 20070728, allow local users to cause a denial of service panic via a 1 negative or 2 large value in an ioctl call, as demonstrated by the vgaallocattr function...

CVE-2007-3654

The CVE-2007-3654 issue affects NetBSD: display driver allocattr functions in NetBSD 3.0 through 4.0_BETA2, and NetBSD-current before 20070728. The root cause is improper validation in an ioctl call within the vga_allocattr path, allowing a local attacker to trigger a denial-of-service (panic) by...

CVE-2007-4305

Multiple race conditions in the 1 Sudo monitor mode and 2 Sysjail policies in Systrace on NetBSD and OpenBSD allow local users to defeat system call interposition, and consequently bypass access control policy and auditing...

Race condition

Multiple race conditions in the 1 Sudo monitor mode and 2 Sysjail policies in Systrace on NetBSD and OpenBSD allow local users to defeat system call interposition, and consequently bypass access control policy and auditing...

CVE-2007-4305

CVE-2007-4305 involves multiple race conditions in the Sudo monitor mode and in Sysjail policies of Systrace on NetBSD and OpenBSD. The underlying issue allows local users to defeat system call interposition, thereby bypassing access control policy and auditing. Affected components: NetBSD/OpenBS...

CVE-2007-4305

Multiple race conditions in the 1 Sudo monitor mode and 2 Sysjail policies in Systrace on NetBSD and OpenBSD allow local users to defeat system call interposition, and consequently bypass access control policy and auditing...

NetBSD reference ISO protocol implementation multiple security vulnerabilities

Buffer overflows in different functions...

Buffer overflow

Multiple buffer overflows in the ISO network protocol support in the NetBSD kernel 2.0 through 4.0BETA2, and NetBSD-current before 20070329, allow local users to execute arbitrary code via long parameters to certain functions, as demonstrated by a long sockaddr structure argument to the clnproute...

CVE-2007-1677

Multiple buffer overflows in the ISO network protocol support in the NetBSD kernel 2.0 through 4.0BETA2, and NetBSD-current before 20070329, allow local users to execute arbitrary code via long parameters to certain functions, as demonstrated by a long sockaddr structure argument to the clnproute...

CVE-2007-1677

Multiple buffer overflows in the ISO network protocol support in the NetBSD kernel 2.0 through 4.0BETA2, and NetBSD-current before 20070329, allow local users to execute arbitrary code via long parameters to certain functions, as demonstrated by a long sockaddr structure argument to the clnproute...

CVE-2007-1677

CVE-2007-1677 affects the NetBSD kernel ISO network protocol support. The vulnerability consists of multiple buffer overflows in the clnp_route-related handling, allowing a local user to execute arbitrary code via overly long sockaddr structures. Impact is local code execution with the same privi...

CVE-2007-1523

Heap-based buffer overflow in the kernel in NetBSD 3.0, certain versions of FreeBSD and OpenBSD, and possibly other BSD derived operating systems allows local users to have an unknown impact. NOTE: this information is based upon a vague pre-advisory with no actionable information. Details will be...

CVE-2007-1523

Technical details for CVE-2007-1523 are not publicly available in the provided documents. Monitor for updates as information remains vague and no concrete impact, affected products, or mitigations are disclosed.

CVE-2007-1523

Heap-based buffer overflow in the kernel in NetBSD 3.0, certain versions of FreeBSD and OpenBSD, and possibly other BSD derived operating systems allows local users to have an unknown impact. NOTE: this information is based upon a vague pre-advisory with no actionable information. Details will be...

NetBSD ktruser integer overflow

No description provided...

CVE-2007-1273

Integer overflow in the ktruser function in NetBSD-current before 20061022, NetBSD 3 and 3-0 before 20061024, and NetBSD 2 before 20070209, when the kernel is built with the COMPATFREEBSD or COMPATDARWIN option, allows local users to cause a denial of service and possibly gain privileges...

Integer overflow

Integer overflow in the ktruser function in NetBSD-current before 20061022, NetBSD 3 and 3-0 before 20061024, and NetBSD 2 before 20070209, when the kernel is built with the COMPATFREEBSD or COMPATDARWIN option, allows local users to cause a denial of service and possibly gain privileges...

CVE-2007-1273

The CVE concerns NetBSD kernels compiled with COMPAT_FREEBSD or COMPAT_DARWIN. Affected are NetBSD-current prior to 20061022, NetBSD 3 and 3-0 prior to 20061024, and NetBSD 2 prior to 20070209. The issue is an integer overflow in the ktruser function, which can allow local users to cause a denial...