CVE-2016-9040

An exploitable denial of service exists in the the Joyent SmartOS OS 20161110T013148Z Hyprlofs file system. The vulnerability is present in the Ioctl system call with the command HYPRLOFSADDENTRIES when used with a 32 bit model. An attacker can cause a buffer to be allocated and never freed. When...

CVE-2016-9040

CVE-2016-9040 : Joyent SmartOS Hyprlofs IOCTL ADD_ENTRIES (32-bit) vulnerability. Hyprlofs_ioctl allocates a buffer (len based on user input) and may not free it on all paths, enabling memory exhaustion and full system DoS with repeated calls. Affected: SmartOS 20161110T013148Z Hyprlofs file syst...

CVE-2016-9040: Uncontrolled Resource Consumption

An exploitable denial of service exists in the the Joyent SmartOS OS 20161110T013148Z Hyprlofs file system. The vulnerability is present in the Ioctl system call with the command HYPRLOFSADDENTRIES when used with a 32 bit model. An attacker can cause a buffer to be allocated and never freed. When...

PT-2018-5058 · Joyent · Smartos

Name of the Vulnerable Software and Affected Versions: Joyent SmartOS OS version 20161110T013148Z Description: The issue is related to a denial of service in the Hyprlofs file system. It is present in the Ioctl system call with the command HYPRLOFSADDENTRIES when used with a 32-bit model. An...

The vulnerability of the kernel of the Solaris and SmartOS operating systems allows a hacker to execute arbitrary code.

The vulnerability of the kernels in Solaris and SmartOS is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Joyent SmartOS Elevation of Privilege Vulnerability

Joyent SmartOS is a set of open source operating system from Joyent, Inc. in the United States. A security vulnerability exists in the DTrace DOF file in the Joyent SmartOS release-20170803-20170803T064301Z, which stems from a program that makes it difficult to correctly validate user-submitted...

CVE-2018-1171

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Joyent SmartOS release-20170803-20170803T064301Z. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw...

CVE-2018-1171

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Joyent SmartOS release-20170803-20170803T064301Z. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw...

Design/Logic Flaw

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Joyent SmartOS release-20170803-20170803T064301Z. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw...

CVE-2018-1171

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Joyent SmartOS release-20170803-20170803T064301Z. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw...

CVE-2018-1171

The CVE-2018-1171 entry concerns Joyent SmartOS release-20170803. An attacker who can run low-privileged code on the target can exploit a flaw in the DTrace DOF handling to write past the end of an allocated object, enabling local privilege escalation and code execution under the host OS. Root ca...

CVE-2018-1171: Out-of-bounds Write

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Joyent SmartOS release-20170803-20170803T064301Z. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw...

Joyent SmartOS DTrace DOF Out-Of-Bounds Write Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Joyent SmartOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the DTrace DOF file...

Joyent SmartOS SMB_IOC_SVCENUM IOCTL elevation of privilege vulnerability

Joyent SmartOS is a set of open source operating system from Joyent, USA. A security vulnerability exists in the SMBIOCTREERELE ioctl in Joyent SmartOS release-20170803-20170803T064301Z, which stems from the program failing to correctly detect user-submitted data, resulting in the size of copied...

Joyent SmartOS SMBIOC_TREE_RELE elevation of privilege vulnerability

Joyent SmartOS is a set of open source operating system from Joyent, USA. A security vulnerability exists in the SMBIOCTREERELE ioctl in Joyent SmartOS release-20170803-20170803T064301Z, which stems from a program's failure to detect the existence of an object before performing an operation on it...

Design/Logic Flaw

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Joyent SmartOS release-20170803-20170803T064301Z. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw...

CVE-2018-1166

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Joyent SmartOS release-20170803-20170803T064301Z. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw...

Heap overflow

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Joyent SmartOS release-20170803-20170803T064301Z. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw...

CVE-2018-1165

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Joyent SmartOS release-20170803-20170803T064301Z. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw...

CVE-2018-1165

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Joyent SmartOS release-20170803-20170803T064301Z. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw...