Joyent SmartOS Hyprlofs FS IOCTL 32-bit File System path Buffer Overflow Privilege Escalation Vulnerability(CVE-2016-9035)

Summary An exploitable buffer overflow exists in the the Joyent SmartOS OS 20161110T013148Z Hyprlofs file system. The vulnerability is present in the Ioctl system call with the command HYPRLOFSADDENTRIES when dealing with native file systems. An attacker can craft an input that can cause a buffer...

CVE-2016-9035

An exploitable buffer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system. The vulnerability is present in the Ioctl system call with the command HYPRLOFSADDENTRIES when dealing with native file systems. An attacker can craft an input that can cause a buffer overflow in th...

CVE-2016-9035

CVE-2016-9035 affects Joyent SmartOS Hyprlofs IOCTL path handling. The vulnerability arises in the HYPRLOFS_ADD_ENTRIES path where a stack buffer path[MAXPATHLEN] can be overflowed due to an off-by-one check: e.g., a user length greater than MAXPATHLEN is rejected, but lengths equal to MAXPATHLEN...