Skip to content
OpenAdvisories
Medium WID-SEC-2026-1575 2 CVEs

NetBSD Foundation NetBSD OS: Mehrere Schwachstellen ermöglichen Denial of Service

Published May 18, 2026 · Updated May 18, 2026 · de-DE

Vendor: NetBSD Product: NetBSD OS

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in NetBSD Foundation NetBSD OS ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

NetBSD ist ein Open-Source-Betriebssystem aus der BSD-Familie und gehört damit zu den Unix-Derivaten.

Vulnerabilities 2

  • Medium 5.5
    CVE-2026-32849

    NetBSD Signed Integer Overflow in cryptodev_op via cryptodev.c

    NetBSD prior to commit ec8451e contains a signed integer overflow vulnerability in the cryptodev_op() function in sys/opencrypto/cryptodev.c where the local variable iov_len is declared as a signed int but assigned from an unsigned cop->dst_len value, causing…

    NetBSD src
  • Medium 4.7
    CVE-2026-32848

    NetBSD cryptodev Race Condition Double-Free via cryptodev_op()

    NetBSD prior to commit ec8451e contains a race condition vulnerability in cryptodev_op() within the opencrypto subsystem that allows local attackers to trigger a double-free condition by concurrently issuing CIOCCRYPT operations on the same session identifier…

    NetBSD src

Revision history

  1. #1

    Initiale Fassung

References