NetBSD KernFS Local Kernel Memory Disclosure Vulnerability
BID:15264
Info
NetBSD KernFS Local Kernel Memory Disclosure Vulnerability
| Bugtraq ID: | 15264 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Nov 01 2005 12:00AM |
| Updated: | Nov 01 2005 12:00AM |
| Credit: | The vendor disclosed this issue. |
| Vulnerable: |
NetBSD NetBSD 2.0.2 NetBSD NetBSD 2.0.1 NetBSD NetBSD 2.0 NetBSD NetBSD 1.6.2 NetBSD NetBSD 1.6.1 NetBSD NetBSD 1.6 beta NetBSD NetBSD 1.6 NetBSD NetBSD 1.5.3 NetBSD NetBSD 1.5.2 NetBSD NetBSD 1.5.1 NetBSD NetBSD 1.5 x86 NetBSD NetBSD 1.5 sh3 NetBSD NetBSD 1.5 NetBSD NetBSD 1.4.3 NetBSD NetBSD 1.4.2 x86 NetBSD NetBSD 1.4.2 SPARC NetBSD NetBSD 1.4.2 arm32 NetBSD NetBSD 1.4.2 Alpha NetBSD NetBSD 1.4.2 NetBSD NetBSD 1.4.1 x86 NetBSD NetBSD 1.4.1 SPARC NetBSD NetBSD 1.4.1 sh3 NetBSD NetBSD 1.4.1 arm32 NetBSD NetBSD 1.4.1 Alpha NetBSD NetBSD 1.4.1 NetBSD NetBSD 1.4 x86 NetBSD NetBSD 1.4 SPARC NetBSD NetBSD 1.4 arm32 NetBSD NetBSD 1.4 Alpha NetBSD NetBSD 1.4 NetBSD NetBSD 1.3.3 NetBSD NetBSD 1.3.2 NetBSD NetBSD 1.3.1 NetBSD NetBSD 1.3 NetBSD NetBSD 1.2.1 NetBSD NetBSD 1.2 NetBSD NetBSD 1.1 NetBSD NetBSD 1.0 |
| Not Vulnerable: |
NetBSD NetBSD 2.0.3 |
Discussion
NetBSD KernFS Local Kernel Memory Disclosure Vulnerability
The kernfs file system in NetBSD is prone to a kernel memory disclosure vulnerability. This issue arises due to insufficient sanitization of user-supplied arguments passed to 'kernfs_xread()'.
Information disclosed through this attack may be used to launch other attacks against a computer and potentially aid in a complete compromise.
The kernfs file system in NetBSD is prone to a kernel memory disclosure vulnerability. This issue arises due to insufficient sanitization of user-supplied arguments passed to 'kernfs_xread()'.
Information disclosed through this attack may be used to launch other attacks against a computer and potentially aid in a complete compromise.
Exploit / POC
NetBSD KernFS Local Kernel Memory Disclosure Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
NetBSD KernFS Local Kernel Memory Disclosure Vulnerability
Solution:
NetBSD has released version 2.0.3 of the NetBSD operating system to address this, and other issues.
Solution:
NetBSD has released version 2.0.3 of the NetBSD operating system to address this, and other issues.
References
NetBSD KernFS Local Kernel Memory Disclosure Vulnerability
References:
References:
- Announcing update 2.0.3 - source only (NetBSD)
- NetBSD Homepage (NetBSD)
- NetBSD Security Page (NetBSD)