CVE-2006-0145: Medium severity NetBSD NetBSD vulnerability
The kernfsxread function in kernfs in NetBSD 1.6 through 2.1, and OpenBSD 3.8, does not properly validate file offsets against negative 32-bit values that occur as a result of truncation, which allows local users to read arbitrary kernel memory and gain privileges via the lseek system call.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-0145?
CVE-2006-0145 is considered to have a high severity due to its potential to allow local users to read arbitrary kernel memory and gain elevated privileges.
How do I fix CVE-2006-0145?
To fix CVE-2006-0145, update your NetBSD or OpenBSD system to the latest version that addresses this vulnerability.
Which systems are affected by CVE-2006-0145?
CVE-2006-0145 affects NetBSD versions 1.6 through 2.1 and OpenBSD version 3.8.
What happens if CVE-2006-0145 is exploited?
If exploited, CVE-2006-0145 can lead to unauthorized access to sensitive information in kernel memory and privilege escalation.
Is CVE-2006-0145 a remote exploitation vulnerability?
No, CVE-2006-0145 is a local exploitation vulnerability that requires local user access to be exploited.