CVE-2006-4516

Published Oct 12, 2006 CVSS 2.0 · 4.9 Medium EPSS < 1% KEV · Not listed
Description
Integer signedness error in FreeBSD 6.0-RELEASE allows local users to cause a denial of service (memory corruption and kernel panic) via a PT_LWPINFO ptrace command with a large negative data value that satisfies a signed maximum value check but is used in an unsigned copyout function call.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2006-4504 Integer signedness error in FreeBSD 6.0-RELEASE allows local users to cause a denial of service (memory corruption and kernel panic) via a PT_LWPINFO ptrace command with a large negative data value that satisfies a signed maximum value check but is used in an unsigned copyout function call.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 7:14 PM
Reserved
Aug 31, 2006, 12:00 AM
Status
Modified
Published
Oct 12, 2006, 12:07 AM
Modified
Jun 16, 2026, 10:29 PM