CVE-2016-6240

CVE-2016-6240 describes an integer truncation in OpenBSD 5.8/5.9’s amap_alloc kernel function, enabling local privilege escalation to kernel level via a large size value. The vulnerability affects the kernel space and is documented in NVD and OpenBSD errata pages; exploitation details are not pro...

CVE-2016-6240

Integer truncation error in the amapalloc function in OpenBSD 5.8 and 5.9 allows local users to execute arbitrary code with kernel privileges via a large size value...

CVE-2016-6245

OpenBSD 5.8 and 5.9 allows local users to cause a denial of service kernel panic via a large size in a getdents system call...

CVE-2016-6242

OpenBSD 5.8 and 5.9 are affected by CVE-2016-6242: a local attacker can trigger a denial of service by supplying a large ident value to a kevent system call, causing an assertion failure and kernel panic. This is a local-privilege context with no remote access implied. The observed impact is a ke...

CVE-2016-6244

The systhrsigdivert function in kern/kernsig.c in the OpenBSD kernel 5.9 allows remote attackers to cause a denial of service panic via a negative "ts.tvsec" value...

Code injection

The systhrsigdivert function in kern/kernsig.c in the OpenBSD kernel 5.9 allows remote attackers to cause a denial of service panic via a negative "ts.tvsec" value...

CVE-2016-6244

The systhrsigdivert function in kern/kernsig.c in the OpenBSD kernel 5.9 allows remote attackers to cause a denial of service panic via a negative "ts.tvsec" value...

CVE-2016-6244

CVE-2016-6244 concerns the OpenBSD kernel prior to patch level that contains the sys_thrsigdivert function in kern/kern_sig.c (OpenBSD 5.9). The vulnerability allows remote attackers to trigger a denial of service (kernel panic) by sending a negative ts.tv_sec value, as described in the NVD entry...

CVE-2016-6244

The systhrsigdivert function in kern/kernsig.c in the OpenBSD kernel 5.9 allows remote attackers to cause a denial of service panic via a negative "ts.tvsec" value...

CVE-2016-6242: Undefined Security Weakness

OpenBSD 5.8 and 5.9 allows local users to cause a denial of service assertion failure and kernel panic via a large ident value in a kevent system call...

CVE-2016-6239: Improper Input Validation

The mmap extension MAPNOFAULT in OpenBSD 5.8 and 5.9 allows attackers to cause a denial of service kernel panic and crash via a large size value...

CVE-2016-6350: NULL Pointer Dereference

OpenBSD 5.8 and 5.9 allows local users to cause a denial of service NULL pointer dereference and panic via a sysctl call with a path starting with 10,9...

CVE-2016-6244: Improper Input Validation

The systhrsigdivert function in kern/kernsig.c in the OpenBSD kernel 5.9 allows remote attackers to cause a denial of service panic via a negative "ts.tvsec" value...

PT-2017-1727

Name of the Vulnerable Software and Affected Versions OpenBSD versions 5.8 through 5.9 Description The issue is caused by an integer overflow in the amap alloc1 function, which allows local users to execute arbitrary code with kernel privileges by providing a large size value. This can be exploit...

CVE-2016-6522: Integer Overflow or Wraparound

Integer overflow in the uvmmapisavail function in uvm/uvmmap.c in OpenBSD 5.9 allows local users to cause a denial of service kernel panic via a crafted mmap call, which triggers the new mapping to overlap with an existing mapping...

PT-2017-1721

Name of the Vulnerable Software and Affected Versions OpenBSD versions 5.8 through 5.9 Description The issue allows certain local users to cause a denial of service, resulting in a kernel panic. This can be achieved by unmounting a filesystem with an open vnode on the mnt vnodelist. The problem...

PT-2017-1723

Name of the Vulnerable Software and Affected Versions OpenBSD versions 5.8 through 5.9 Description The issue is related to errors in the code of the OpenBSD operating system. It can be exploited by a local attacker to cause a denial of service, resulting in a kernel panic, by using a large size i...

PT-2017-1726

Name of the Vulnerable Software and Affected Versions OpenBSD versions 5.8 through 5.9 Description The issue is related to errors in number handling within the OpenBSD operating system. It can be exploited by a local attacker to cause a denial of service, resulting in an "Assertion failure" error...

PT-2017-1728

Name of the Vulnerable Software and Affected Versions OpenBSD versions 5.8 through 5.9 Description The issue is related to an integer truncation error in the amap alloc function, which can be exploited by local users to execute arbitrary code with kernel privileges. This can be achieved by...

PT-2017-8989

Name of the Vulnerable Software and Affected Versions OpenBSD version 5.9 Description The issue is caused by an integer overflow in the uvm map isavail function, which can be triggered by a local user via a crafted mmap call. This results in a denial of service, specifically a kernel panic, when...