CVE-2006-3824

systeminfo.c for Sun Solaris allows local users to read kernel memory via a 0 variable count argument to the sysinfo system call, which causes a -1 argument to be used by the copyout function. NOTE: this issue has been referred to as an integer overflow, but it is probably more like a signedness error or integer underflow.

CVSS v2.0

4.9 MEDIUMAV:L/AC:L/Au:N/C:C/I:N/A:N

EPSS

0.98% chance of exploitation in the next 30 days, 60th percentile

Published

2006-07-25

Updated

2024-08-07

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/2241
• https://www.exploit-db.com/exploits/2067

References

• CVE Record
• NVD entry

Related

• CVE-2006-3823
• CVE-2006-3826
• CVE-2006-3822
• CVE-2006-3827
• CVE-2006-3819
• CVE-2006-3828