CVE-2006-5679: Freebsd

Medium severity, CVSS 4.6. EPSS: 1% chance of exploitation in the next 30 days.

Integer overflow in the ffs_mountfs function in FreeBSD 6.1 allows local users to cause a denial of service (panic) and possibly execute arbitrary code via a crafted UFS filesystem that causes invalid or large size parameters to be provided to the kmem_alloc function. NOTE: a third party states that this issue does not cross privilege boundaries in FreeBSD because only root may mount a filesystem.

Affected products

• Freebsd Freebsd: version 6.1 only

Published 2006-11-03. Last modified 2026-06-16.