CVE-2006-3824: Integer Overflow
systeminfo.c for Sun Solaris allows local users to read kernel memory via a 0 variable count argument to the sysinfo system call, which causes a -1 argument to be used by the copyout function. NOTE: this issue has been referred to as an integer overflow, but it is probably more like a signedness error or integer underflow.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-3824?
CVE-2006-3824 is considered to have a medium severity rating due to its potential to allow local users to read sensitive kernel memory.
How do I fix CVE-2006-3824?
To mitigate CVE-2006-3824, users should apply the latest patches and updates provided for Oracle Solaris 10.0.
Who is affected by CVE-2006-3824?
CVE-2006-3824 specifically affects users of Oracle Solaris 10.0 on both SPARC and x86 architectures.
What systems are vulnerable to CVE-2006-3824?
The vulnerable systems to CVE-2006-3824 include Oracle Solaris 10.0 running on SPARC and x86 platforms.
Is CVE-2006-3824 an integer overflow issue?
CVE-2006-3824 has been described in various contexts as an integer overflow, but it involves signedness issues resulting in an incorrect argument being used.