CVE-2006-5218: Netbsd

Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days.

Integer overflow in the systrace_preprepl function (STRIOCREPLACE) in systrace in OpenBSD 3.9 and NetBSD 3 allows local users to cause a denial of service (crash), gain privileges, or read arbitrary kernel memory via large numeric arguments to the systrace ioctl.

Affected products

• Netbsd Netbsd: version 3.0 only
• OpenBSD OpenBSD: version 3.8 only; version 3.9 only

Published 2006-10-10. Last modified 2026-06-16.