Code injection

OpenBSD 5.8 and 5.9 allows certain local users with kern.usermount privileges to cause a denial of service kernel panic by mounting a tmpfs with a VNOVAL in the 1 username, 2 groupname, or 3 device name of the root node...

CVE-2016-6247

OpenBSD 5.8 and 5.9 allows certain local users to cause a denial of service kernel panic by unmounting a filesystem with an open vnode on the mntvnodelist...

CVE-2016-6246

OpenBSD 5.8 and 5.9 allows certain local users with kern.usermount privileges to cause a denial of service kernel panic by mounting a tmpfs with a VNOVAL in the 1 username, 2 groupname, or 3 device name of the root node...

CVE-2016-6239

The mmap extension MAPNOFAULT in OpenBSD 5.8 and 5.9 allows attackers to cause a denial of service kernel panic and crash via a large size value...

CVE-2016-6243

thrsleep in kern/kernsynch.c in OpenBSD 5.8 and 5.9 allows local users to cause a denial of service kernel panic via a crafted value in the tsp parameter of the thrsleep system call...

Code injection

The mmap extension MAPNOFAULT in OpenBSD 5.8 and 5.9 allows attackers to cause a denial of service kernel panic and crash via a large size value...

Integer overflow

Integer overflow in the uvmmapisavail function in uvm/uvmmap.c in OpenBSD 5.9 allows local users to cause a denial of service kernel panic via a crafted mmap call, which triggers the new mapping to overlap with an existing mapping...

Open redirect

OpenBSD 5.8 and 5.9 allows certain local users to cause a denial of service kernel panic by unmounting a filesystem with an open vnode on the mntvnodelist...

CVE-2016-6246

OpenBSD 5.8 and 5.9 allows certain local users with kern.usermount privileges to cause a denial of service kernel panic by mounting a tmpfs with a VNOVAL in the 1 username, 2 groupname, or 3 device name of the root node...

CVE-2016-6239

The mmap extension MAPNOFAULT in OpenBSD 5.8 and 5.9 allows attackers to cause a denial of service kernel panic and crash via a large size value...

CVE-2016-6522

Integer overflow in the uvmmapisavail function in uvm/uvmmap.c in OpenBSD 5.9 allows local users to cause a denial of service kernel panic via a crafted mmap call, which triggers the new mapping to overlap with an existing mapping...

CVE-2016-6247

OpenBSD 5.8 and 5.9 allows certain local users to cause a denial of service kernel panic by unmounting a filesystem with an open vnode on the mntvnodelist...

CVE-2016-6245

OpenBSD 5.8 and 5.9 allows local users to cause a denial of service kernel panic via a large size in a getdents system call...

Information disclosure

OpenBSD 5.8 and 5.9 allows local users to cause a denial of service kernel panic via a large size in a getdents system call...

CVE-2016-6522

Integer overflow in the uvmmapisavail function in uvm/uvmmap.c in OpenBSD 5.9 allows local users to cause a denial of service kernel panic via a crafted mmap call, which triggers the new mapping to overlap with an existing mapping...

CVE-2016-6245

OpenBSD 5.8 and 5.9 allows local users to cause a denial of service kernel panic via a large size in a getdents system call...

CVE-2016-6522

Integer overflow in the uvmmapisavail function in uvm/uvmmap.c in OpenBSD 5.9 allows local users to cause a denial of service kernel panic via a crafted mmap call, which triggers the new mapping to overlap with an existing mapping...

CVE-2016-6243

OpenBSD 5.8/5.9 kernel vulnerability CVE-2016-6243: thrsleep in kern/kern_synch.c can be triggered by a crafted tsp value in __thrsleep, allowing local users to cause a denial of service (kernel panic). Documents confirm affected file and parameters; no remediation details are provided here. Expl...

CVE-2016-6522

CVE-2016-6522 concerns OpenBSD 5.9 kernel code, where an integer overflow in the uvm_map_isavail function (uvm/uvm_map.c) can be triggered by a crafted mmap call. This may cause a denial of service via a kernel panic due to the new mapping overlapping an existing mapping. Elevation or remote impa...

CVE-2016-6245

OpenBSD 5.8 and 5.9 are affected. Local users can trigger a denial of service (kernel panic) by providing a large size to the getdents system call. The available sources do not include a confirmed patch version or remediation steps. No exploitation details are provided beyond the described impact...