CVE-2006-1588

Опубликовано: 03 апр. 2006

Источник: nvd

CVSS2: 2.1

EPSS Низкий

Описание

The bridge ioctl (if_bridge code) in NetBSD 1.6 through 3.0 does not clear sensitive memory before copying ioctl results to the requesting process, which allows local users to obtain portions of kernel memory.

Ссылки

ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2006-005.txt.asc
Vendor Advisory
http://secunia.com/advisories/19464
Vendor Advisory
http://securitytracker.com/id?1015846
Patch
http://www.osvdb.org/24262
http://www.securityfocus.com/bid/17312
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/25582
ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2006-005.txt.asc
Vendor Advisory
http://secunia.com/advisories/19464
Vendor Advisory
http://securitytracker.com/id?1015846
Patch
http://www.osvdb.org/24262
http://www.securityfocus.com/bid/17312
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/25582

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:netbsd:netbsd:1.6:*:*:*:*:*:*:*

cpe:2.3:o:netbsd:netbsd:1.6:beta:*:*:*:*:*:*

cpe:2.3:o:netbsd:netbsd:1.6.1:*:*:*:*:*:*:*

cpe:2.3:o:netbsd:netbsd:1.6.2:*:*:*:*:*:*:*

cpe:2.3:o:netbsd:netbsd:2.0:*:*:*:*:*:*:*

cpe:2.3:o:netbsd:netbsd:2.0.1:*:*:*:*:*:*:*

cpe:2.3:o:netbsd:netbsd:2.0.2:*:*:*:*:*:*:*

cpe:2.3:o:netbsd:netbsd:2.0.3:*:*:*:*:*:*:*

cpe:2.3:o:netbsd:netbsd:2.1:*:*:*:*:*:*:*

cpe:2.3:o:netbsd:netbsd:3.0:*:*:*:*:*:*:*

EPSS

Процентиль: 23%

0.00078

Низкий

2.1 Low

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-g8vw-4vw6-856q

github

почти 4 года назад