CVE-2006-4516 in FreeBSD
Summary
Integer signedness error in FreeBSD 6.0-RELEASE allows local users to cause a denial of service (memory corruption and kernel panic) via a PT_LWPINFO ptrace command with a large negative data value that satisfies a signed maximum value check but is used in an unsigned copyout function call.
Reservation
08/31/2006
Disclosure
10/11/2006
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 2602 | FreeBSD ptrace PT_LWPINFO denial of service | 404 | Proof-of-Concept | Official fix | CVE-2006-4516 |