NetBSD

NetBSD Security Advisory 2011-003: Exhausting kernel memory from user controlled value

Kernel memory can be exhausted by a specially crafted program. This may cause a panic.

NetBSD Security Advisory 2010-010: Buffer Length Handling Errors in netsmb

Local Kernel Memory Exhaustion DoS Attack.

NetBSD Security Advisory 2010-009: Privilege Handling Errors In larn

Unprivileged Local Users Can Gain Access To "games" Group.

NetBSD Security Advisory 2010-006: Buffer length checking errors in CODA

The CODA filesystem kernel module was incorrectly checking buffer limits enabling a regular user read access to kernel memory

NetBSD-SA2010-003: azalia(4)/hdaudio(4) negative mixer index panic

A signedness issue in the azalia(4) and hdaudio(4) drivers allows a local attacker to cause a kernel panic.

NetBSD Security Advisory 2009-012: SHA2 implementation potential buffer overflow

An error initializing a SHA2 context causes vulnerable applications using libcrypto to suffer from a 4- or 8-byte buffer overflow (for SHA256 and SHA512 correspondingly) with fixed content, potentially causing applications to crash.

NetBSD Security Advisory 2008-015: ICMPv6 Packet Too Big messages

NetBSD Security Advisory 2008-014: Cross-site request forgery in ftpd(8)

NetBSD Security Advisory 2008-013: IPv6 Neighbor Discovery Protocol

An attacker may be able to forge IPv6 routing entries to intercept network traffic or cause a denial of service attack.

NetBSD Security Advisory 2008-012: Denial of service issues in racoon(8)

Currently racoon(8) does not remove orphaned invalid connections initiated by a remote peer. As a result of this a otential denial of service issue can occur.

NetBSD Security Advisory 2008-011: ICMPv6 MLD query

A malformed ICMPv6 MLD (RFC 2710) query directed at a NetBSD host can result in a denial of service (system panic).

NetBSD Security Advisory 2008-010: Malicious PPPoE discovery packet can overrun a kernel buffer

A bug in range checking allows a malicious packet to make the kernel access memory outside of the allocated buffer and cause a kernel crash.

NetBSD-SA2006-023 OpenSSL RSA Signature Forgery

OpenSSL contains a vulnerability in the validation of PKCS #1 v1.5 signatures.

NetBSD 3.0.2 and 3.1 available - multiple security fixes

The NetBSD Project is pleased to announce that versions 3.0.2 and 3.1 of the NetBSD operating system are now available in both source and binary form.

NetBSD-SA2006-023 OpenSSL RSA Signature Forgery

OpenSSL contains a vulnerability in the validation of PKCS #1 v1.5 signatures.

NetBSD-SA2006-022 BIND recursive query and SIG query processing

Two denial of service vulnerabilities have been reported in bind which can cause the name server daemon to crash.

NetBSD-SA2006-021 Integer overflows in CID-keyed font parser

There are integer overflows present in the CID-keys font parser as supplied with both XFree86 and X11R7.0.

NetBSD-SA2006-020 Integer overflows in PCF font parsers

There are integer overflows present in the PCF font parsers as supplied with both XFree86 and X11R7.0.

NetBSD-SA2006-019 Malicious PPP options can overrun a kernel buffer

A problem has been identified in the in-kernel PPP code shared by ISDN PPP interfaces ippp(4) and pppoe(4).

NetBSD Security Advisory 2006-019 -- Malicious PPP options can overrun a kernel buffer

A problem has been identified in the in-kernel PPP code shared by ISDN PPP interfaces ippp(4) and pppoe(4).

NetBSD Security Advisory 2006-018 sail(6), dm(8) and tetris(6) buffer overflows

The sail, dungeon master arbiter and tetris games all contain buffer overflows.

NetBSD Security Advisory 2006-017 Sendmail malformed multipart MIME messages

Sendmail is vulnerable to a denial of service condition in the handling of malformed multipart MIME messages.

NetBSD Security Advisory 2006-016 IPv6 socket options can crash the system

Insufficient validation when parsing IPv6 socket options can lead to a system crash.

End-of-life for NetBSD 1.6

NetBSD Security Advisory 2006-014 An audio subsystem race condition may crash the system

A system crash can occur if a user changes the sample rate of an audio device during playback.