CVE-2006-6656 Information disclosure in n/a

What is CVE-2006-6656?

CVE-2006-6656 is a low-severity vulnerability in Netbsd Netbsd, published on 20 Dec 2006. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Unspecified vulnerability in ptrace in NetBSD-current before 20061027, NetBSD 3.0 and 3.0.1 before 20061027, and NetBSD 2.x before 20061119 allows local users to read kernel memory and obtain sensitive information via certain manipulations of a PT_LWPINFO request, which leads to a memory leak and information leak.

Which versions are affected by CVE-2006-6656?

It affects 1 product.

Products include Netbsd Netbsd.

How do I fix CVE-2006-6656?

No fix has been published for CVE-2006-6656 yet. Limit exposure of the affected software until one is available.

Is CVE-2006-6656 being exploited?

There is no known exploitation of CVE-2006-6656 in the wild and no public exploit code.

Other vulnerabilities in Netbsd Netbsd

• CVE-2017-1000374 Security feature bypass in n/a Critical 9.8
• CVE-2017-1000375 Memory corruption in n/a Critical 9.8
• CVE-2017-1000378 Denial of service in n/a Critical 9.8
• CVE-2015-8212 Command injection in n/a Critical 9.8
• CVE-2008-3584 Denial of service in n/a Critical 9.3

All Netbsd Netbsd vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-2h56-q6pr-f3f8.