Design/Logic Flaw

A flaw exists in OpenBSD's implementation of the stack guard page that allows attackers to bypass it resulting in arbitrary code execution using setuid binaries such as /usr/bin/at. This affects OpenBSD 6.1 and possibly earlier versions...

CVE-2017-1000373

The OpenBSD qsort function is recursive, and not randomized, an attacker can construct a pathological input array of N elements that causes qsort to deterministically recurse N/4 times. This allows attackers to consume arbitrary amounts of stack memory and manipulate stack memory to assist in...

CVE-2017-1000372

A flaw exists in OpenBSD's implementation of the stack guard page that allows attackers to bypass it resulting in arbitrary code execution using setuid binaries such as /usr/bin/at. This affects OpenBSD 6.1 and possibly earlier versions...

CVE-2017-1000373

Technical details for CVE-2017-1000373 are not publicly available in the provided connected documents; the materials list the CVE but do not describe affected product/version/root-cause or fix. Monitor for updates.

CVE-2017-1000373

The OpenBSD qsort function is recursive, and not randomized, an attacker can construct a pathological input array of N elements that causes qsort to deterministically recurse N/4 times. This allows attackers to consume arbitrary amounts of stack memory and manipulate stack memory to assist in...

CVE-2017-1000372

A flaw exists in OpenBSD's implementation of the stack guard page that allows attackers to bypass it resulting in arbitrary code execution using setuid binaries such as /usr/bin/at. This affects OpenBSD 6.1 and possibly earlier versions...

CVE-2017-1000372

OpenBSD stack guard page vulnerability (CVE-2017-1000372) allows bypass of the stack guard and arbitrary code execution via setuid binaries such as /usr/bin/at. Affected: OpenBSD 6.1 and possibly earlier. Root cause: improper implementation/handling of the stack guard page, enabling bypass under ...

CVE-2017-1000373

The OpenBSD qsort function is recursive, and not randomized, an attacker can construct a pathological input array of N elements that causes qsort to deterministically recurse N/4 times. This allows attackers to consume arbitrary amounts of stack memory and manipulate stack memory to assist in...

CVE-2017-1000372

A flaw exists in OpenBSD's implementation of the stack guard page that allows attackers to bypass it resulting in arbitrary code execution using setuid binaries such as /usr/bin/at. This affects OpenBSD 6.1 and possibly earlier versions...

CVE-2017-1000372: Undefined Security Weakness

A flaw exists in OpenBSD's implementation of the stack guard page that allows attackers to bypass it resulting in arbitrary code execution using setuid binaries such as /usr/bin/at. This affects OpenBSD 6.1 and possibly earlier versions...

PT-2017-2389

Name of the Vulnerable Software and Affected Versions OpenBSD versions 6.1 and earlier NetBSD affected versions not specified Description The issue is related to a flaw in the implementation of the stack guard page, which can be bypassed, allowing for arbitrary code execution. This can be achieve...

CVE-2017-1000373: Uncontrolled Resource Consumption

The OpenBSD qsort function is recursive, and not randomized, an attacker can construct a pathological input array of N elements that causes qsort to deterministically recurse N/4 times. This allows attackers to consume arbitrary amounts of stack memory and manipulate stack memory to assist in...

PT-2017-10954

Name of the Vulnerable Software and Affected Versions OpenBSD versions 6.1 and earlier Description The issue concerns the qsort function in OpenBSD, which is recursive and not randomized. An attacker can create a specific input array that causes the function to recurse a certain number of times,...

The vulnerability of the OpenBSD operating system, which allows a hacker to trigger a service failure

The vulnerability of the OpenBSD operating system is related to errors in the code. Exploiting this vulnerability allows a local attacker to cause a system failure a kernel crash through a large number of system calls to getdents...

The vulnerability of the OpenBSD operating system, which allows a hacker to trigger a service failure

The vulnerability of the systhrsigdiv function in the kernel/kernsig.c file in the OpenBSD operating system exists due to insufficient checking of input data. Exploiting this vulnerability could allow a malicious actor to cause a service failure by using the negative value of “ts.tvsec”...

The vulnerability of the OpenBSD operating system, which allows a hacker to trigger a service failure

The vulnerability of the OpenBSD operating system is related to errors in number processing. Exploiting this vulnerability allows a malicious actor, operating locally, to cause a service failure—i.e., the appearance of a “Assertion failure” window and a kernel error. This occurs by using a large...

The vulnerability of the OpenBSD operating system, which allows a hacker to trigger a service failure

The vulnerability of the mmap extension’s MAPNOFAULT flag in the OpenBSD operating system exists due to insufficient checks on input data. Exploiting this vulnerability allows a local attacker to cause a kernel panic by using a large value...

The vulnerability of the OpenBSD operating system, which allows a hacker to trigger a service failure

The vulnerability of the OpenBSD operating system exists due to insufficient checking of input data. Exploiting this vulnerability allows a local attacker to cause a service failure a kernel crash by unmounting the file system and opening vnodes in the mntvnodelist...

The vulnerability of the OpenBSD operating system, which allows a hacker to trigger a service failure

The vulnerability of the OpenBSD operating system exists due to insufficient checks on input data. Exploiting this vulnerability allows a person with privileged mounting functions, who operates locally, to cause a service failure a kernel crash by mounting a temporary file system with values of 1...

The vulnerability of the OpenBSD operating system, which allows a hacker to execute arbitrary code

The vulnerability of the amapalloc function in the OpenBSD operating system is related to errors in number processing. Exploiting this vulnerability allows a local attacker to execute arbitrary code with kernel privileges, using a value of a very large size...