CVE-2006-1797

NetBSD - Denial of Service via SIOCGIFALIAS ioctl NULL Pointer Dereference

Title source: llm
STIX 2.1

Description

The kernel in NetBSD-current before September 28, 2005 allows local users to cause a denial of service (system crash) by using the SIOCGIFALIAS ioctl to gather information on a non-existent alias of a network interface, which causes a NULL pointer dereference.

References (6)

Core 6
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/17497
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/24578
Third Party Advisory vendor-advisory x_refsource_netbsd
http://archives.neohapsis.com/archives/netbsd/2006-q2/0014.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1015908
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/25766
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/19615

Scores

EPSS 0.0006
EPSS Percentile 19.9%

Details

Status published
Products (9)
netbsd/netbsd 1.6 (2 CPE variants)
netbsd/netbsd 1.6.1
netbsd/netbsd 1.6.2
netbsd/netbsd 2.0
netbsd/netbsd 2.0.1
netbsd/netbsd 2.0.2
netbsd/netbsd 2.0.3
netbsd/netbsd 2.1
netbsd/netbsd 3.0
Published Apr 18, 2006
Tracked Since Feb 18, 2026