CVE-2006-4516 in FreeBSD

Resumen (Inglés)

Integer signedness error in FreeBSD 6.0-RELEASE allows local users to cause a denial of service (memory corruption and kernel panic) via a PT_LWPINFO ptrace command with a large negative data value that satisfies a signed maximum value check but is used in an unsigned copyout function call.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Reservar

2006-08-31

Divulgación

2006-10-11

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
2602	FreeBSD ptrace PT_LWPINFO denegación de servicio	404	Prueba de concepto	Arreglo oficial	CVE-2006-4516

Fuentes

• MITRE
• NVD
• CVE Details