VULNERABILITY INTELLIGENCE

CVE-2006-1588

CVSS score2.1 LOW
EPSS probability0.34%
CISA KEVNot currently listed
Published2006-04-03
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:P/I:N/A:N

Description

The bridge ioctl (if_bridge code) in NetBSD 1.6 through 3.0 does not clear sensitive memory before copying ioctl results to the requesting process, which allows local users to obtain portions of kernel memory.

Primary references