1722 matches found
CVE-2017-1000372
A flaw exists in OpenBSD's implementation of the stack guard page that allows attackers to bypass it resulting in arbitrary code execution using setuid binaries such as /usr/bin/at. This affects OpenBSD 6.1 and possibly earlier versions...
Code injection
The OpenBSD qsort function is recursive, and not randomized, an attacker can construct a pathological input array of N elements that causes qsort to deterministically recurse N/4 times. This allows attackers to consume arbitrary amounts of stack memory and manipulate stack memory to assist in...
Design/Logic Flaw
A flaw exists in OpenBSD's implementation of the stack guard page that allows attackers to bypass it resulting in arbitrary code execution using setuid binaries such as /usr/bin/at. This affects OpenBSD 6.1 and possibly earlier versions...
CVE-2017-1000372
A flaw exists in OpenBSD's implementation of the stack guard page that allows attackers to bypass it resulting in arbitrary code execution using setuid binaries such as /usr/bin/at. This affects OpenBSD 6.1 and possibly earlier versions...
CVE-2017-1000373
The OpenBSD qsort function is recursive, and not randomized, an attacker can construct a pathological input array of N elements that causes qsort to deterministically recurse N/4 times. This allows attackers to consume arbitrary amounts of stack memory and manipulate stack memory to assist in...
CVE-2017-1000372
OpenBSD stack guard page vulnerability (CVE-2017-1000372) allows bypass of the stack guard and arbitrary code execution via setuid binaries such as /usr/bin/at. Affected: OpenBSD 6.1 and possibly earlier. Root cause: improper implementation/handling of the stack guard page, enabling bypass under ...
CVE-2017-1000373
Technical details for CVE-2017-1000373 are not publicly available in the provided connected documents; the materials list the CVE but do not describe affected product/version/root-cause or fix. Monitor for updates.
CVE-2017-1000373
The OpenBSD qsort function is recursive, and not randomized, an attacker can construct a pathological input array of N elements that causes qsort to deterministically recurse N/4 times. This allows attackers to consume arbitrary amounts of stack memory and manipulate stack memory to assist in...
CVE-2017-1000372
A flaw exists in OpenBSD's implementation of the stack guard page that allows attackers to bypass it resulting in arbitrary code execution using setuid binaries such as /usr/bin/at. This affects OpenBSD 6.1 and possibly earlier versions...
The vulnerability of the OpenBSD operating system, which allows a hacker to trigger a service failure
The vulnerability of the systhrsigdiv function in the kernel/kernsig.c file in the OpenBSD operating system exists due to insufficient checking of input data. Exploiting this vulnerability could allow a malicious actor to cause a service failure by using the negative value of “ts.tvsec”...
The vulnerability of the OpenBSD operating system, which allows a hacker to trigger a service failure
The vulnerability of the OpenBSD operating system is related to errors in number processing. Exploiting this vulnerability allows a malicious actor, operating locally, to cause a service failure—i.e., the appearance of a “Assertion failure” window and a kernel error. This occurs by using a large...
The vulnerability of the OpenBSD operating system, which allows a hacker to trigger a service failure
The vulnerability of the OpenBSD operating system exists due to insufficient checking of input data. Exploiting this vulnerability allows a local attacker to cause a service failure a kernel crash by unmounting the file system and opening vnodes in the mntvnodelist...
The vulnerability of the OpenBSD operating system, which allows a hacker to execute arbitrary code
The vulnerability of the amapalloc1 function in the OpenBSD operating system is caused by a numerical overflow. Exploiting this vulnerability allows an attacker, operating locally, to execute arbitrary code with kernel privileges, using a value of a very large size...
The vulnerability of the OpenBSD operating system, which allows a hacker to trigger a service failure
The vulnerability of the mmap extension’s MAPNOFAULT flag in the OpenBSD operating system exists due to insufficient checks on input data. Exploiting this vulnerability allows a local attacker to cause a kernel panic by using a large value...
The vulnerability of the OpenBSD operating system, which allows a hacker to trigger a service failure
The vulnerability of the OpenBSD operating system exists due to insufficient checks on input data. Exploiting this vulnerability allows a person with privileged mounting functions, who operates locally, to cause a service failure a kernel crash by mounting a temporary file system with values of 1...
The vulnerability of the OpenBSD operating system, which allows a hacker to trigger a service failure
The vulnerability of the thrsleep function in the kernel/kernsynch.c file of the OpenBSD operating system exists due to insufficient checking of input data. Exploiting this vulnerability could allow a local attacker to cause a kernel panic by using a specially crafted value as the tsp parameter i...
The vulnerability of the OpenBSD operating system, which allows a hacker to execute arbitrary code
The vulnerability of the amapalloc function in the OpenBSD operating system is related to errors in number processing. Exploiting this vulnerability allows a local attacker to execute arbitrary code with kernel privileges, using a value of a very large size...
The vulnerability of the OpenBSD operating system, which allows a hacker to trigger a service failure
The vulnerability of the OpenBSD operating system is related to errors in the code. Exploiting this vulnerability allows a local attacker to cause a system failure a kernel crash through a large number of system calls to getdents...