Receipt of IP packets with certain sequences of malformed IP options can cause an unaligned access in kernel mode (on many architectures), or data corruption, resulting in a panic or other problems.
f8cef208a1f568ebde931884c1fb940cb0522fa38fe3d9ecf2661a0913573333
Updated NetBSD Security Advisory - Procfs local root vulnerability. Systems which have procfs configured in the kernel, but not mounted normally, are still vulnerable because user processes may mount procfs. This includes most default NetBSD installations. NetBSD security page here.
1838f1f1359abb3f784db566ae4482ff550682a1b1f47623dd3bfc572a77a0e4
netbsd.1998-001.bind.496
296cf51c37fdbd2541676be6cd14672bb72274ee80745428d4dcd7274201a970
netbsd.1998-002.xterm.xaw
d30ccf8e95d244048da510f3d422a3f17b7f7d4379258c4a2f81e4eb018128b3
netbsd.1998-003.mmap
a812b8342ad9e37bad1b75268786ac2976fd8e88d023262f275c6312c3a5b2ff
netbsd.1998-004.at
26f655ffce193ce850b88a3c35b2628775be0bbacbd516622f039c14287bd1f6
netbsd.1998-005
f59979dd843204186a99f8b811f7b3289d9e6522a60c2758d03d44ae86cb7357
NetBSD uses the ptrace(2) system call to trace and debug other processes. The debugging process can also modify the internal registers, including the status (PSL) register, for the process being debugged. Besides the normal user-accessible flags, the VAX hardware also stores information about privilege levels and used stacks in the PSL. Those flags are only altered via the instruction REI (return from interrupt) or LDPCTX (load process context) and cannot be modified while running in "user" mode. NetBSD security page here.
a2eae820bbf7e17d7b14c389412aaa0a20c9afbfb8e698cf5ca9f30212b728e8
netbsd.1999-001.select.accept
993fa24d9a16fb0e713dfb9d20b3dbe2ac4ad07ea4d7a4805ec85fd52df73f45
netbsd.1999-002.netstat
6f78298f7a9ac29e09725b5add98565d4e46eb115f71a8192e20282c13edca09
netbsd.1999-006.umapfs
951defc0643dacbcb999cb737a1066e7ba2382bf2fb70e1f71989ac4eccbcec2
netbsd.1999-007.noexec_mount
107829bc0d6ee804b82f97291d34dc45e1ccc9814e835934916f0c52f4edb30c
netbsd.1999-009
a08137717a82664a61bec9ed286e253db896b4fa6db14b1bb370dd7e04bc0016
netbsd.1999-010
4266078a4a37d6c3ea371bb3ceb1bdebb9fc6e68c250fb3e7dddb47fe3133653
netbsd.1999-011.profil
fa7b42e5f379a3d0ae23d59f89bd059096097f9e77952272d90c9f53cf8db755