CVE-2005-0637: The copy functions in locore.s such as copyout in OpenBSD 3.5 and 3.6, and possibly other BSD based operati...

Security readout for executives and security teams

This is an old OpenBSD kernel bug in low-level memory copy routines. On affected OpenBSD 3.5 and 3.6 i386 systems, an attacker may be able to cross intended address limits and modify kernel memory. That can threaten system integrity, but the bundle does not confirm active exploitation. Exposure is mainly legacy OpenBSD 3.5 or 3.6 systems, especially i386 builds referenced by OpenBSD errata. The CVE says other BSD-based systems may be affected, but the provided evidence does not confirm specific additional products or versions. Treat this as high priority only if legacy OpenBSD 3.5 or 3.6 remains in service. For modern supported systems, priority is likely low unless a vendor advisory links them to the same issue. Mitigation focus: Apply the relevant OpenBSD February 28, 2005 errata security fix.; Upgrade unsupported OpenBSD 3.5 or 3.6 systems to a supported release.; Check vendor advisories for any BSD-derived platforms before assuming exposure..

Prepared

Jun 29, 2026, 23:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.