Vulnerability Database

299,879

Total vulnerabilities in the database

CVE-2009-2793

The kernel in NetBSD, probably 5.0.1 and earlier, on x86 platforms does not properly handle a pre-commit failure of the iret instruction, which might allow local users to gain privileges via vectors related to a tempEIP pseudocode variable that is outside of the code-segment limits.

  • Published: Sep 18, 2009
  • Updated: Nov 9, 2025
  • CVE: CVE-2009-2793
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 4.6
  • AV:L/AC:L/Au:N/C:P/I:P/A:P

CWEs:

Software From Fixed in
netbsd / netbsd 1.5.3 1.5.3.x
netbsd / netbsd 1.6 1.6.x
netbsd / netbsd 1.3 1.3.x
netbsd / netbsd 5.0 5.0.x
netbsd / netbsd 1.5 1.5.x
netbsd / netbsd 4.0 4.0.x
netbsd / netbsd 2.1 2.1.x
netbsd / netbsd 1.2.1 1.2.1.x
netbsd / netbsd 1.3.1 1.3.1.x
netbsd / netbsd 2.0.2 2.0.2.x
netbsd / netbsd 1.6.1 1.6.1.x
netbsd / netbsd 3.0.1 3.0.1.x
netbsd / netbsd 2.0.3 2.0.3.x
netbsd / netbsd 3.0.2 3.0.2.x
netbsd / netbsd 1.6.2 1.6.2.x
netbsd / netbsd 1.3.3 1.3.3.x
netbsd / netbsd 4.0.1 4.0.1.x
netbsd / netbsd 1.0 1.0.x
netbsd / netbsd 0.9 0.9.x
netbsd / netbsd 1.5.1 1.5.1.x
netbsd / netbsd 0.8 0.8.x
netbsd / netbsd 1.1 1.1.x
netbsd / netbsd 1.5.2 1.5.2.x
netbsd / netbsd 2.0.1 2.0.1.x
netbsd / netbsd - 5.0.1.x
netbsd / netbsd 3.1 3.1.x
netbsd / netbsd 3.0 3.0.x
netbsd / netbsd 1.3.2 1.3.2.x
netbsd / netbsd 2.0 2.0.x
netbsd / netbsd 1.2 1.2.x