Integer Overflow Vulnerability in Systrace for OpenBSD and NetBSD

CVE-2006-5218

Summary

The systrace component in OpenBSD 3.9 and NetBSD 3 contains an integer overflow vulnerability in the systrace_preprepl function (STRIOCREPLACE). This flaw can be exploited by local users by providing large numeric arguments to the systrace ioctl, potentially leading to denial of service conditions, privilege escalation, or unauthorized access to arbitrary kernel memory.

References