CVE-2007-1523

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-03-20 · updated 2026-06-16

Description

Heap-based buffer overflow in the kernel in NetBSD 3.0, certain versions of FreeBSD and OpenBSD, and possibly other BSD derived operating systems allows local users to have an unknown impact. NOTE: this information is based upon a vague pre-advisory with no actionable information. Details will be updated after 20070329.

Affected products

Netbsd: 3.0

References

http://kernelwars.blogspot.com/2007/01/alive.html
http://osvdb.org/34593
http://www.blackhat.com/html/bh-europe-07/bh-eu-07-speakers.html#Eriksson
http://www.securityfocus.com/bid/22945
http://kernelwars.blogspot.com/2007/01/alive.html
http://osvdb.org/34593
http://www.blackhat.com/html/bh-europe-07/bh-eu-07-speakers.html#Eriksson
http://www.securityfocus.com/bid/22945

Get alerted when CVE-2007-1523 or the next vulnerability affects your stack