42 matches found
The vulnerability of the tcp_sack_option() function in the kernel of the OpenBSD operating system allows a hacker to cause a service failure.
The vulnerability of the tcpsackoption function in the kernel of the OpenBSD operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
Code injection
The systhrsigdivert function in kern/kernsig.c in the OpenBSD kernel 5.9 allows remote attackers to cause a denial of service panic via a negative "ts.tvsec" value...
CVE-2016-6244: Improper Input Validation
The systhrsigdivert function in kern/kernsig.c in the OpenBSD kernel 5.9 allows remote attackers to cause a denial of service panic via a negative "ts.tvsec" value...
kernel: drm_modeset_ctl signedness issue
Integer signedness error in the drmmodesetctl function in 1 drivers/gpu/drm/drmirq.c in the Direct Rendering Manager DRM subsystem in the Linux kernel before 2.6.38 and 2 sys/dev/pci/drm/drmirq.c in the kernel in OpenBSD before 4.9 allows local users to trigger out-of-bounds write operations, and...
Integer overflow
Integer signedness error in the drmmodesetctl function in 1 drivers/gpu/drm/drmirq.c in the Direct Rendering Manager DRM subsystem in the Linux kernel before 2.6.38 and 2 sys/dev/pci/drm/drmirq.c in the kernel in OpenBSD before 4.9 allows local users to trigger out-of-bounds write operations, and...
PT-2011-2814 · Openbsd +2 · Openbsd Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.38 OpenBSD kernel versions prior to 4.9 Description: The issue is caused by an integer signedness error in the drm modeset ctl function, allowing local users to trigger out-of-bounds write operations. This c...
OpenBSD <= 4.5 (IP datagrams) Remote DOS Vulnerability
No description provided by source. / / / / / / / / / / / / / // / / / / / / / / / // / / / // // / / / / / // ///// // // // Helith - 0815 -------------------------------------------------------------------------------- Author : Rembrandt Date : 2009-04-09 Affected Software: OpenBSD Kernel Affect...
OpenBSD 4.5 - IP datagrams Remote Denial of Service
OpenBSD 4.5 - IP datagrams Remote Denial of Service / / / / / / / / / / / / / // / / / / / / / / / // / / / // // / / / / / // ///// // // // Helith - 0815 -------------------------------------------------------------------------------- Author : Rembrandt Date : 2009-04-09 Affected Software:...
CVE-2005-0637
The copy functions in locore.s such as copyout in OpenBSD 3.5 and 3.6, and possibly other BSD based operating systems, may allow attackers to exceed certain address boundaries and modify kernel memory...
OpenBSD kernel information leak
It's possible to read chunks from kernel memory via procfs...
CVE-2003-0955
OpenBSD kernel 3.3 and 3.4 allows local users to cause a denial of service kernel panic and possibly execute arbitrary code in 3.4 via a program with an invalid header that is not properly handled by 1 ibcs2exec.c in the iBCS2 emulation compatibcs2 or 2 execelf.c, which leads to a stack-based...
CVE-2003-0955
OpenBSD kernel 3.3 and 3.4 are affected by CVE-2003-0955 due to a stack-based buffer overflow in iBCS2 emulation (ibcs2_exec.c) and in exec_elf.c triggered by a program with an invalid header. Local users can cause a denial of service (kernel panic) and possibly execute arbitrary code on 3.4. The...
OpenBSD 3.3/3.4 - semctl/semop Local Unexpected Array Indexing
// source: https://www.securityfocus.com/bid/9086/info A local OpenBSD kernel vulnerability has been discovered when handling the semctl and semop system calls. The problem specifically occurs due to improper sanity checking before handling a user-supplied semaphore set. It is said that this coul...
Integer overflow in OpenBSD kernel
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Local security bug in OpenBSD semaphore handling Product: OpenBSD kernel 3.3-release, -current before 10/09/2003 Impact: Root may bypass securelevel Bug class: Integer overflow Vendor notified: Yes Fix available: Yes Details: An integer overflow...
Signed/unsigned conversion bug in OpenBSD select() call
By passing negative argument to select function it's possible to overwrite the fragment of kernel memory...
OpenBSD kernel fails to properly check closed file descriptors "0-2" when running setuid program
Overview The OpenBSD kernel does not adequately check file descriptors 0-2 prior to execing setuid binaries. Other OS kernels may be vulnerable as well. Description The OpenBSD kernel does not adequately check file descriptors 0-2 prior to execing setuid binaries. As a result, an attacker may be...
OpenBSD bug
Hi I recently found a vulnerability in OpenBSD kernel that allows any user capable of executing a process to deliver SIGURG and SIGIO signals to any process or group of process owned by any user in the system. Although the default behaviour in OpenBSD is to ignore these signals, this issue could ...
obsd_fun.c
"hello hello obsd team. my obsd box panics every few seconds. what the hell is wrong?" "oh ? really ? hmm...out of space in kmemmap ?" "YES. you know about this bug ?" "yes. some kiddo is running a DoS against your box. we fixed it in 2.7. the kernel runs out of memory if you flood it with...