CVE-2006-1588: Netbsd

Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days.

The bridge ioctl (if_bridge code) in NetBSD 1.6 through 3.0 does not clear sensitive memory before copying ioctl results to the requesting process, which allows local users to obtain portions of kernel memory.

Affected products

• Netbsd Netbsd: version 1.6 only; version 1.6.1 only; version 1.6.2 only; version 2.0 only; version 2.0.1 only; version 2.0.2 only; …

Published 2006-04-03. Last modified 2026-06-16.