CVE-2005-4776

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-12-31 · updated 2026-06-16

Description

Integer overflow in the FreeBSD compatibility code (freebsd_misc.c) in NetBSD-current, NetBSD-3, NetBSD-2.0, and NetBSD-2 before 20050913; and NetBSD-1.6 before 20050914; allows local users to cause a denial of service (heap corruption or system crash) and possibly gain root privileges.

Affected products

Netbsd: 1.6, 1.6-beta, 1.6.1, 1.6.2, 2.0, 2.0.1 (+1)

References

http://mail-index.netbsd.org/source-changes/2005/09/13/0024.html
http://www.osvdb.org/20757
http://mail-index.netbsd.org/source-changes/2005/09/13/0024.html
http://www.osvdb.org/20757

Get alerted when CVE-2005-4776 or the next vulnerability affects your stack