CVE-2005-4776: Integer Overflow
Integer overflow in the FreeBSD compatibility code (freebsdmisc.c) in NetBSD-current, NetBSD-3, NetBSD-2.0, and NetBSD-2 before 20050913; and NetBSD-1.6 before 20050914; allows local users to cause a denial of service (heap corruption or system crash) and possibly gain root privileges.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-4776?
CVE-2005-4776 has a severity that allows local users to cause denial of service, including potential system crashes and heap corruption.
How do I fix CVE-2005-4776?
To fix CVE-2005-4776, upgrade to a patched version of NetBSD released after September 13, 2005.
Which versions are affected by CVE-2005-4776?
CVE-2005-4776 affects NetBSD versions 1.6, 2.0, as well as their beta and minor releases prior to specified patch dates.
Can CVE-2005-4776 lead to privilege escalation?
Yes, CVE-2005-4776 may potentially allow local users to gain root privileges under certain conditions.
What type of vulnerability is CVE-2005-4776?
CVE-2005-4776 is classified as an integer overflow vulnerability within the FreeBSD compatibility code.