NE
Product
Netbsd
168
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 10Medium 3Low 1
Watch
Add Netbsd to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2008-1215 | – | Mar 9 | Stack-based buffer overflow in the command_Expand_Interpret function in command.c in ppp (aka user-ppp), as distributed in FreeBSD 6.3 and 7.0, OpenBSD 4.1 and 4.2, and the… Affected: All versions, or not specified |
| CVE-2007-3654 | – | Sep 17 | The display driver allocattr functions in NetBSD 3.0 through 4.0_BETA2, and NetBSD-current before 20070728, allow local users to cause a denial of service (panic) via a (1)… Affected: 3.0; 3.0.1; 3.0.2; 4.0 |
| CVE-2007-1677 | – | Mar 30 | Multiple buffer overflows in the ISO network protocol support in the NetBSD kernel 2.0 through 4.0_BETA2, and NetBSD-current before 20070329, allow local users to execute… Affected: 2.0; 2.0.1; 2.0.2; 2.0.3; 3.0.1; 3.0.2; +6 more |
| CVE-2007-1523 | – | Mar 20 | Heap-based buffer overflow in the kernel in NetBSD 3.0, certain versions of FreeBSD and OpenBSD, and possibly other BSD derived operating systems allows local users to have an… Affected: 3.0 |
| CVE-2006-6730 | – | Dec 26 | OpenBSD and NetBSD permit usermode code to kill the display server and write to the X.Org /dev/xf86 device, which allows local users with root privileges to reduce securelevel by… Affected: 2.0.4 |
| CVE-2006-6654 | – | Dec 20 | The sendmsg function in NetBSD-current before 20061023, NetBSD 3.0 and 3.0.1 before 20061024, and NetBSD 2.x before 20061029, when run on a 64-bit architecture, allows attackers… Affected: 2.0; 2.1; 3.0; 3.0.1 |
| CVE-2006-6653 | – | Dec 20 | The accept function in NetBSD-current before 20061023, NetBSD 3.0 and 3.0.1 before 20061024, and NetBSD 2.x before 20061029 allows local users to cause a denial of service (socket… Affected: 2.0; 3.0; 3.0.1; current |
| CVE-2006-6652 | – | Dec 20 | Buffer overflow in the glob implementation (glob.c) in libc in NetBSD-current before 20050914, NetBSD 2.* and 3.* before 20061203, and Apple Mac OS X before 2007-004, as used by… Affected: 2.0; 2.1; 3.0; 3.1 |
| CVE-2006-6655 | – | Dec 20 | The procfs implementation in NetBSD-current before 20061023, NetBSD 3.0 and 3.0.1 before 20061024, and NetBSD 2.x before 20061029 allows local users to cause a denial of service… Affected: 2.0; 2.1; 3.0; 3.0.1 |
| CVE-2006-6656 | – | Dec 20 | Unspecified vulnerability in ptrace in NetBSD-current before 20061027, NetBSD 3.0 and 3.0.1 before 20061027, and NetBSD 2.x before 20061119 allows local users to read kernel… Affected: 2.0; 2.1; 3.0; 3.0.1 |
| CVE-2006-6657 | – | Dec 20 | The if_clone_list function in NetBSD-current before 20061027, NetBSD 3.0 and 3.0.1 before 20061027, and NetBSD 2.x before 20061119 allows local users to read potentially… Affected: 2.0; 2.1; 3.0; 3.0.1 |
| CVE-2006-6397 | – | Dec 8 | Integer overflow in banner/banner.c in FreeBSD, NetBSD, and OpenBSD might allow local users to modify memory via a long banner Affected: 2.0.4 |
| CVE-2006-6014 | – | Nov 21 | The NetBSD-current kernel before 20061028 does not properly perform bounds checking of an unspecified userspace parameter in the ptrace system call during a PT_DUMPCORE request,… Affected: current |
| CVE-2006-6013 | – | Nov 21 | Integer signedness error in the fw_ioctl (FW_IOCTL) function in the FireWire (IEEE-1394) drivers (dev/firewire/fwdev.c) in various BSD kernels, including DragonFlyBSD, FreeBSD… Affected: 2.0.4 |
| CVE-2006-5218 | – | Oct 10 | Integer overflow in the systrace_preprepl function (STRIOCREPLACE) in systrace in OpenBSD 3.9 and NetBSD 3 allows local users to cause a denial of service (crash), gain… Affected: 3.0 |
| CVE-2006-5215 | – | Oct 10 | The Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060317, and Solaris 8 through 10 before 20061006, allows local users to overwrite… Affected: through current; 1.0; 1.1; 1.2; 1.2.1; 1.3; +34 more |
| CVE-2006-5214 | – | Oct 10 | Race condition in the Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060225, and Solaris 8 through 10 before 20061006, causes a… Affected: 3.0; 3.99.15 |
| CVE-2006-4304 | – | Aug 24 | Buffer overflow in the sppp driver in FreeBSD 4.11 through 6.1, NetBSD 2.0 through 4.0 beta before 20060823, and OpenBSD 3.8 and 3.9 before 20060902 allows remote attackers to… Affected: 2.0; 3.0; 4.0 |
| CVE-2006-3202 | – | Jun 23 | The ip6_savecontrol function in NetBSD 2.0 through 3.0, under certain configurations, does not check to see if IPv4-mapped sockets are being used before processing IPv6 socket… Affected: 2.0; 2.0.2; 2.0.3; 2.1; 3.0 |
| CVE-2006-2205 | – | May 5 | The audio_write function in NetBSD 3.0 allows local users to cause a denial of service (kernel crash) by using the audiosetinfo ioctl to change the sample rate of an audio device Affected: 3.0 |
| CVE-2006-1833 | – | Apr 19 | Intel RNG Driver in NetBSD 1.6 through 3.0 may incorrectly detect the presence of the pchb interface, which will cause it to always generate the same random number, which allows… Affected: 1.6; 1.6; 1.6.1; 1.6.2; 2.0; 2.0.1; +4 more |
| CVE-2006-1814 | – | Apr 18 | NetBSD 1.6, 2.0, 2.1 and 3.0 allows local users to cause a denial of service (memory exhaustion) by using the sysctl system call to lock a large buffer into physical memory Affected: 1.6; 1.6; 1.6.1; 1.6.2; 2.0; 2.0.1; +4 more |
| CVE-2006-1797 | – | Apr 18 | The kernel in NetBSD-current before September 28, 2005 allows local users to cause a denial of service (system crash) by using the SIOCGIFALIAS ioctl to gather information on a… Affected: 1.6; 1.6; 1.6.1; 1.6.2; 2.0; 2.0.1; +4 more |
| CVE-2006-1588 | – | Apr 3 | The bridge ioctl (if_bridge code) in NetBSD 1.6 through 3.0 does not clear sensitive memory before copying ioctl results to the requesting process, which allows local users to… Affected: 1.6; 1.6; 1.6.1; 1.6.2; 2.0; 2.0.1; +4 more |
| CVE-2006-1589 | – | Apr 3 | The elf_load_file function in NetBSD 2.0 through 3.0 allows local users to cause a denial of service (kernel crash) via an ELF interpreter that does not have a PT_LOAD section in… Affected: 2.0; 2.0.1; 2.0.2; 2.0.3; 2.1; 3.0 |
| CVE-2006-1587 | – | Apr 3 | NetBSD 1.6 up to 3.0, when a user has "set record" in .mailrc with the default umask set, creates the record file with 0644 permissions, which allows local users to read the… Affected: 1.6; 1.6; 1.6.1; 1.6.2; 2.0; 2.0.1; +4 more |
| CVE-2006-0905 | – | Mar 23 | A "programming error" in fast_ipsec in FreeBSD 4.8-RELEASE through 6.1-STABLE and NetBSD 2 through 3 does not properly update the sequence number associated with a Security… Affected: 2.0; 3.0 |
| CVE-2006-0145 | – | Jan 9 | The kernfs_xread function in kernfs in NetBSD 1.6 through 2.1, and OpenBSD 3.8, does not properly validate file offsets against negative 32-bit values that occur as a result of… Affected: 1.6; 1.6; 1.6.1; 1.6.2; 2.0; 2.0.1; +3 more |
| CVE-2005-4352 | – | Dec 31 | The securelevels implementation in NetBSD 2.1 and earlier, and Linux 2.6.15 and earlier, allows local users to bypass time setting restrictions and set the clock backwards by… Affected: 1.6; 1.6; 1.6.1; 1.6.2; 2.0; 2.0.1; +4 more |
| CVE-2005-4783 | – | Dec 31 | kernfs_xread in kernfs_vnops.c in NetBSD before 20050831 does not check for a negative offset when reading the message buffer, which allows local users to read arbitrary kernel… Affected: 1.6; 2.0; 2.0.3; 2.1 |
| CVE-2005-4782 | – | Dec 31 | NetBSD 2.0 before 2.0.4, 2.1 before 2.1.1, and 3, when the kernel is compiled with "options DIAGNOSTIC," allows local users to cause a denial of service (kernel assertion panic)… Affected: 2.0; 2.0.1; 2.0.2; 2.0.3; 2.1 |
| CVE-2005-4779 | – | Dec 31 | verifiedexecioctl in verified_exec.c in NetBSD 2.0.2 calls NDINIT with UIO_USERSPACE rather than UID_SYSSPACE, which removes the functionality of the verified exec kernel… Affected: 2.0; 2.0.1; 2.0.2 |
| CVE-2005-4776 | – | Dec 31 | Integer overflow in the FreeBSD compatibility code (freebsd_misc.c) in NetBSD-current, NetBSD-3, NetBSD-2.0, and NetBSD-2 before 20050913; and NetBSD-1.6 before 20050914; allows… Affected: 1.6; 1.6; 1.6.1; 1.6.2; 2.0; 2.0.1; +1 more |
| CVE-2005-4741 | – | Dec 31 | NetBSD 1.6, NetBSD 2.0 through 2.1, and NetBSD-current before 20051031 allows local users to gain privileges by attaching a debugger to a setuid/setgid (P_SUGID) process that… Affected: 1.6; 1.6.1; 1.6.2; 2.0; 2.0.1; 2.0.2; +2 more |
| CVE-2005-4733 | – | Dec 31 | NetBSD 2.0 before 20050316 and NetBSD-current before 20050112 allow local users to cause a denial of service (infinite loop and system hang) by calling the F_CLOSEM fcntl with a… Affected: 2.0 |
| CVE-2005-4691 | – | Dec 31 | imake in NetBSD before 2.0.3, NetBSD-current before 12 September 2005, certain versions of X.Org, and certain versions of XFree86 allows local users to overwrite arbitrary files… Affected: 1.6; 1.6; 1.6.1; 1.6.2; 2.0; 2.0.1; +1 more |
| CVE-2005-2134 | – | Jul 5 | The (1) clcs and (2) emuxki drivers in NetBSD 1.6 through 2.0.2 allow local users to cause a denial of service (kernel crash) by using the set-parameters ioctl on an audio device… Affected: 1.6; 1.6.1; 1.6.2; 2.0; 2.0.1; 2.0.2 |
| CVE-2004-2012 | – | Dec 31 | The systrace_exit function in the systrace utility for NetBSD-current and 2.0 before April 16, 2004, and certain FreeBSD ports, does not verify the owner of the /dec/systrace… Affected: 2.0 |
| CVE-2004-1374 | – | Dec 18 | Multiple buffer overflows in NetBSD kernel may allow local users to execute arbitrary code and gain privileges Affected: 2.0.4 |
| CVE-2004-1323 | – | Dec 16 | Multiple syscalls in the compat subsystem for NetBSD before 2.0 allow local users to cause a denial of service (kernel crash) via a large signal number to (1) xxx_sys_kill, (2)… Affected: 1.5; 1.5.1; 1.5.2; 1.5.3; 1.6; 1.6.1; +1 more |
| CVE-2004-0257 | – | Nov 23 | OpenBSD 3.4 and NetBSD 1.6 and 1.6.1 allow remote attackers to cause a denial of service (crash) by sending an IPv6 packet with a small MTU to a listening port and then issuing a… Affected: 1.6; 1.6.1 |
| CVE-2004-0230 | – | May 5 | TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections… Affected: 1.5; 1.5.1; 1.5.2; 1.5.3; 1.6; 1.6.1; +2 more |
| CVE-2004-0114 | – | Mar 3 | The shmat system call in the System V Shared Memory interface for FreeBSD 5.2 and earlier, NetBSD 1.3 and earlier, and OpenBSD 2.6 and earlier, does not properly decrement a… Affected: through 1.3 |
| CVE-2003-0914 | – | Dec 15 | ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name server that returns negative responses with a large TTL… Affected: 1.6; 1.6.1; current |
| CVE-2003-0730 | – | Oct 20 | Multiple integer overflows in the font libraries for XFree86 4.3.0 allow local or remote attackers to cause a denial of service or execute arbitrary code via heap-based and… Affected: 1.5; 1.5.1; 1.5.2; 1.5.3; 1.6; 1.6.1 |
| CVE-2003-0694 | – | Oct 6 | The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c Affected: 1.4.3; 1.5; 1.5; 1.5; 1.5.1; 1.5.2; +4 more |
| CVE-2003-0681 | – | Oct 6 | A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) mailer-specific envelope recipients, has… Affected: 1.4.3; 1.5; 1.5; 1.5; 1.5.1; 1.5.2; +4 more |
| CVE-2003-0653 | – | Aug 27 | The OSI networking kernel (sys/netiso) in NetBSD 1.6.1 and earlier does not use a BSD-required "PKTHDR" mbuf when sending certain error responses to the sender of an OSI packet,… Affected: 1.5; 1.5.1; 1.5.2; 1.5.3; 1.6; 1.6.1 |
| CVE-2002-1476 | – | Apr 22 | Buffer overflow in setlocale in libc on NetBSD 1.4.x through 1.6, and possibly other operating systems, when called with the LC_ALL category, allows local attackers to execute… Affected: 1.4; 1.5; 1.5.1; 1.5.2; 1.5.3; 1.6 |
| CVE-2002-1500 | – | Apr 2 | Buffer overflow in (1) mrinfo, (2) mtrace, and (3) pppd in NetBSD 1.4.x through 1.6 allows local users to gain privileges by executing the programs after filling the file… Affected: 1.4; 1.4; 1.4; 1.4; 1.4; 1.4.1; +17 more |