Vulnerability in Netbsd

CVE-2006-1589

The elf_load_file function in NetBSD 2.0 through 3.0 allows local users to cause a denial of service (kernel crash) via an ELF interpreter that does not have a PT_LOAD section in its header, which triggers a null dereference.

EPSS: 0.003 (26.9th percentile) — read the EPSS interpretation.

Affected products

Netbsd — versions 2.0, 2.0.1, 2.0.2
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (Patch, vdb-entry, x_refsource_SECTRACK)
cve@mitre.org (x_refsource_OSVDB, vdb-entry)