CVE-2016-6245: Undefined Security Weakness

OpenBSD 5.8 and 5.9 allows local users to cause a denial of service kernel panic via a large size in a getdents system call...

CVE-2016-6241: Integer Overflow or Wraparound

Integer overflow in the amapalloc1 function in OpenBSD 5.8 and 5.9 allows local users to execute arbitrary code with kernel privileges via a large size value...

CVE-2016-6240: Undefined Security Weakness

Integer truncation error in the amapalloc function in OpenBSD 5.8 and 5.9 allows local users to execute arbitrary code with kernel privileges via a large size value...

PT-2017-8974

Name of the Vulnerable Software and Affected Versions OpenBSD versions 5.8 through 5.9 Description The issue allows local users to cause a denial of service, resulting in a NULL pointer dereference and panic. This can be achieved via a sysctl call with a path starting with 10,9. Recommendations F...

CVE-2016-6243: Improper Input Validation

thrsleep in kern/kernsynch.c in OpenBSD 5.8 and 5.9 allows local users to cause a denial of service kernel panic via a crafted value in the tsp parameter of the thrsleep system call...

CVE-2016-6246: Improper Input Validation

OpenBSD 5.8 and 5.9 allows certain local users with kern.usermount privileges to cause a denial of service kernel panic by mounting a tmpfs with a VNOVAL in the 1 username, 2 groupname, or 3 device name of the root node...

CVE-2016-6247: Improper Input Validation

OpenBSD 5.8 and 5.9 allows certain local users to cause a denial of service kernel panic by unmounting a filesystem with an open vnode on the mntvnodelist...

PT-2017-1722

Name of the Vulnerable Software and Affected Versions OpenBSD versions 5.8 through 5.9 Description The issue allows certain local users with kern.usermount privileges to cause a denial of service, resulting in a kernel panic. This can be achieved by mounting a tmpfs with a VNOVAL in the username,...

PT-2017-1729

Name of the Vulnerable Software and Affected Versions OpenBSD versions 5.8 through 5.9 Description The issue allows attackers to cause a denial of service, resulting in a kernel panic and crash, by exploiting the mmap extension MAP NOFAULT with a large size value. This is due to insufficient inpu...

PT-2017-1725

Name of the Vulnerable Software and Affected Versions OpenBSD versions 5.8 through 5.9 Description The issue is related to insufficient input validation in the thrsleep function in kern/kern synch.c. This allows a local user to cause a denial of service, specifically a kernel panic, by providing ...

PT-2017-8989

Name of the Vulnerable Software and Affected Versions OpenBSD version 5.9 Description The issue is caused by an integer overflow in the uvm map isavail function, which can be triggered by a local user via a crafted mmap call. This results in a denial of service, specifically a kernel panic, when...

OpenBSD http server - denial of service vulnerability(CVE-2017-5850)

No description provided by source. !/usr/bin/perl -w curl --limit-rate 1 --continue-at 1 --header "Host: www.example.com" http://target/10mb.fs use warnings; use IO::Socket; use Parallel::ForkManager; $numforks = 50; if $ARGV \n"; sub killhttpd print "ATTACKING $ARGV0 using $numforks forks\n"; $p...

OpenBSD httpd Memory Exhaustion Denial of Service Vulnerability

OpenBSD is a cross-platform, BSD-based UNIX-like operating system developed by the Canadian OpenBSD project. A memory exhaustion denial of service vulnerability exists in the OpenBSD httpd daemon. An attacker can exploit the vulnerability to cause memory exhaustion, resulting in a denial of servi...

OpenBSD httpd CPU Exhaustion Denial of Service Vulnerability

OpenBSD is a cross-platform, BSD-based UNIX-like operating system developed by the Canadian OpenBSD project. A denial of service vulnerability exists in the OpenBSD httpd daemon. An attacker can exploit the vulnerability to cause CPU exhaustion, resulting in a denial of service attack...

OpenBSD HTTPd < 6.0 - Memory Exhaustion Denial of Service Exploit

Exploit for openbsd platform in category dos / poc Advisory Information Title: Remote DoS against OpenBSD http server up to 6.0 Advisory URL: https://pierrekim.github.io/advisories/CVE-2017-5850-openbsd.txt Blog URL: https://pierrekim.github.io/blog/2017-02-07-openbsd-httpd-CVE-2017-5850.html Dat...

OpenBSD HTTPd 6.0 - Memory Exhaustion Denial of Service

OpenBSD HTTPd 6.0 - Memory Exhaustion Denial of Service Advisory Information Title: Remote DoS against OpenBSD http server up to 6.0 Advisory URL: https://pierrekim.github.io/advisories/CVE-2017-5850-openbsd.txt Blog URL: https://pierrekim.github.io/blog/2017-02-07-openbsd-httpd-CVE-2017-5850.htm...

OpenBSD HTTPd < 6.0 - Memory Exhaustion Denial of Service

Advisory Information Title: Remote DoS against OpenBSD http server up to 6.0 Advisory URL: https://pierrekim.github.io/advisories/CVE-2017-5850-openbsd.txt Blog URL: https://pierrekim.github.io/blog/2017-02-07-openbsd-httpd-CVE-2017-5850.html Date published: 2017-02-07 Vendors contacted: OpenBSD...

OpenBSD HTTP Server 6.0 Denial Of Service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory Information Title: Remote DoS against OpenBSD http server up to 6.0 Advisory URL: https://pierrekim.github.io/advisories/CVE-2017-5850-openbsd.txt Blog URL: https://pierrekim.github.io/blog/2017-02-07-openbsd-httpd-CVE-2017-5850.html Date...

OpenBSD 6.0 httpd Content-Length DoS Exploit

Exploit for openbsd platform in category dos / poc Log message: Reimplement httpd's support for byte ranges. The previous implementation loaded all the output into a single output buffer and used its size to determine the Content-Length of the body. The new implementation calculates the body leng...

[SECURITY] Fedora 25 Update: openssh-7.4p1-1.fc25

SSH Secure SHell is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forward...