VULNERABILITY INTELLIGENCE

CVE-2006-5218

CVSS score4.6 MEDIUM
EPSS probability0.41%
CISA KEVNot currently listed
Published2006-10-10
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:P/I:P/A:P

Description

Integer overflow in the systrace_preprepl function (STRIOCREPLACE) in systrace in OpenBSD 3.9 and NetBSD 3 allows local users to cause a denial of service (crash), gain privileges, or read arbitrary kernel memory via large numeric arguments to the systrace ioctl.

Primary references