GCVE - cpe:2.3:o:netbsd:netbsd:3.99.15:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:netbsd:netbsd:3.99.15:*:*:*:*:*:*:*

part: o version: 3.99.15 update: *

Vendor	Netbsd (`d97e796d-00dc-5b79-b428-0d0c6adaeef6`)
Product	Netbsd (`ca6879a6-363f-5749-9139-ea8a36b24a66`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:netbsd/netbsd`	purl2cpe	2026-06-01 10:15:23.707682

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2010-2530`	vulnerable	2026-06-08 04:55:08.472253	Details available Multiple integer signedness errors in smb_subr.c in the netsmb module in the kernel in NetBSD 5.0.2 and earlier, FreeBSD, and Apple Mac OS X allow local users to cause a denial of service (panic) via a negative size value in a /dev/nsmb ioctl operation, as demonstrated by a (1) SMBIOC_LOOKUP or (2) SMBIOC_OPENSESSION ioctl call. Published: 2010-09-29T16:00:00.000Z Updated: 2024-09-16T23:45:53.259Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2010/07/12/6 http://www.securityfocus.com/bid/41557 http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/netsmb/smb_subr.c.diff?r1=1.34&r2=1.35&only_with_tag=MAIN&f=h http://www.openwall.com/lists/oss-security/2010/07/16/2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-4609`	vulnerable	2026-06-08 04:50:47.223128	Details available The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to cause a denial of service (connection queue exhaustion) via multiple vectors that manipulate information in the TCP state table, as demonstrated by sockstress. Published: 2008-10-20T17:00:00.000Z Updated: 2024-08-07T10:24:20.677Z Open on db.gcve.eu Reference links http://blog.robertlee.name/2008/10/conjecture-speculation.html https://www.cert.fi/haavoittuvuudet/2008/tcp-vulnerabilities.html http://marc.info/?l=bugtraq&m=125856010926699&w=2 http://lists.immunitysec.com/pipermail/dailydave/2008-October/005360.html http://insecure.org/stf/tcp-dos-attack-explained.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-5215`	vulnerable	2026-06-08 04:49:20.073358	Details available The Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060317, and Solaris 8 through 10 before 20061006, allows local users to overwrite arbitrary files, or read another user's Xsession errors file, via a symlink attack on a /tmp/xses-$USER file. Published: 2006-10-09T21:00:00.000Z Updated: 2024-08-07T19:41:05.758Z Open on db.gcve.eu Reference links http://www.netbsd.org/cgi-bin/query-pr-single.pl?number=32805 http://securitytracker.com/id?1017015 http://secunia.com/advisories/22992 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2205 https://exchange.xforce.ibmcloud.com/vulnerabilities/29427	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-5214`	vulnerable	2026-06-08 04:49:20.049623	Details available Race condition in the Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060225, and Solaris 8 through 10 before 20061006, causes a user's Xsession errors file to have weak permissions before a chmod is performed, which allows local users to read Xsession errors files of other users. Published: 2006-10-09T21:00:00.000Z Updated: 2024-08-07T19:41:04.867Z Open on db.gcve.eu Reference links http://securitytracker.com/id?1017015 http://secunia.com/advisories/22992 https://bugs.freedesktop.org/show_bug.cgi?id=5897 http://www.vupen.com/english/advisories/2006/3962 http://secunia.com/advisories/22469	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.