CVE-2006-4516

Severity: medium (CVSS 4.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-10-12 · updated 2026-06-16

Description

Integer signedness error in FreeBSD 6.0-RELEASE allows local users to cause a denial of service (memory corruption and kernel panic) via a PT_LWPINFO ptrace command with a large negative data value that satisfies a signed maximum value check but is used in an unsigned copyout function call.

Affected products

FreeBSD: 6.0-release

References

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=419
http://secunia.com/advisories/22367
http://www.securityfocus.com/bid/20440
https://exchange.xforce.ibmcloud.com/vulnerabilities/29476
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=419
http://secunia.com/advisories/22367
http://www.securityfocus.com/bid/20440
https://exchange.xforce.ibmcloud.com/vulnerabilities/29476

Get alerted when CVE-2006-4516 or the next vulnerability affects your stack