Description
The sendmsg function in NetBSD-current before 20061023, NetBSD 3.0 and 3.0.1 before 20061024, and NetBSD 2.x before 20061029, when run on a 64-bit architecture, allows attackers to cause a denial of service (kernel panic) via an invalid msg_controllen parameter to the sendit function.
References (2)
Core 2
Core References
Patch, Vendor Advisory vdb-entry
x_refsource_sectrack
http://securitytracker.com/id?1017293
Vendor Advisory vendor-advisory
x_refsource_netbsd
ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2006-026.txt.asc
Scores
EPSS
0.0048
EPSS Percentile
65.3%
Details
Status
published
Products (4)
netbsd/netbsd
2.0
netbsd/netbsd
2.1
netbsd/netbsd
3.0
netbsd/netbsd
3.0.1
Published
Dec 20, 2006
Tracked Since
Feb 18, 2026