CVE-2016-6522

Integer overflow in the uvmmapisavail function in uvm/uvmmap.c in OpenBSD 5.9 allows local users to cause a denial of service kernel panic via a crafted mmap call, which triggers the new mapping to overlap with an existing mapping...

CVE-2016-6247

CVE-2016-6247 affects OpenBSD 5.8 and 5.9. The issue allows certain local users to trigger a denial of service (kernel panic) by unmounting a filesystem that has an open vnode on the mnt_vnodelist. The connected records confirm the affected OS versions and the local access vector, with the impact...

CVE-2016-6241

Integer overflow in the amapalloc1 function in OpenBSD 5.8 and 5.9 allows local users to execute arbitrary code with kernel privileges via a large size value...

CVE-2016-6239

CVE-2016-6239 affects OpenBSD 5.8 and 5.9. The mmap extension __MAP_NOFAULT can be triggered by a large size value to cause a denial of service via kernel panic/crash. Impact is availability disruption as stated. No explicit exploitation details or remediation are provided in the connected docume...

CVE-2016-6239

The mmap extension MAPNOFAULT in OpenBSD 5.8 and 5.9 allows attackers to cause a denial of service kernel panic and crash via a large size value...

CVE-2016-6242

OpenBSD 5.8 and 5.9 allows local users to cause a denial of service assertion failure and kernel panic via a large ident value in a kevent system call...

CVE-2016-6246

OpenBSD 5.8/5.9: local users with kern.usermount privileges can cause a kernel panic (DoS) by mounting a tmpfs with a VNOVAL in the root node’s username, groupname, or device name. No remediation details are provided in the available documents.

CVE-2016-6350

OpenBSD 5.8/5.9 local denial of service via NULL pointer dereference in a sysctl call with a path starting with 10,9. Root cause: null pointer dereference. Impact: availability disruption (panic). Public fix/patch details are not provided in the connected documents; no exploitation information is...

CVE-2016-6522

CVE-2016-6522 concerns OpenBSD 5.9 kernel code, where an integer overflow in the uvm_map_isavail function (uvm/uvm_map.c) can be triggered by a crafted mmap call. This may cause a denial of service via a kernel panic due to the new mapping overlapping an existing mapping. Elevation or remote impa...

CVE-2016-6247

OpenBSD 5.8 and 5.9 allows certain local users to cause a denial of service kernel panic by unmounting a filesystem with an open vnode on the mntvnodelist...

CVE-2016-6243

thrsleep in kern/kernsynch.c in OpenBSD 5.8 and 5.9 allows local users to cause a denial of service kernel panic via a crafted value in the tsp parameter of the thrsleep system call...

CVE-2016-6350

OpenBSD 5.8 and 5.9 allows local users to cause a denial of service NULL pointer dereference and panic via a sysctl call with a path starting with 10,9...

CVE-2016-6240

CVE-2016-6240 describes an integer truncation in OpenBSD 5.8/5.9’s amap_alloc kernel function, enabling local privilege escalation to kernel level via a large size value. The vulnerability affects the kernel space and is documented in NVD and OpenBSD errata pages; exploitation details are not pro...

CVE-2016-6242

OpenBSD 5.8 and 5.9 are affected by CVE-2016-6242: a local attacker can trigger a denial of service by supplying a large ident value to a kevent system call, causing an assertion failure and kernel panic. This is a local-privilege context with no remote access implied. The observed impact is a ke...

Code injection

The systhrsigdivert function in kern/kernsig.c in the OpenBSD kernel 5.9 allows remote attackers to cause a denial of service panic via a negative "ts.tvsec" value...

CVE-2016-6244

The systhrsigdivert function in kern/kernsig.c in the OpenBSD kernel 5.9 allows remote attackers to cause a denial of service panic via a negative "ts.tvsec" value...

CVE-2016-6244

The systhrsigdivert function in kern/kernsig.c in the OpenBSD kernel 5.9 allows remote attackers to cause a denial of service panic via a negative "ts.tvsec" value...

CVE-2016-6244

The systhrsigdivert function in kern/kernsig.c in the OpenBSD kernel 5.9 allows remote attackers to cause a denial of service panic via a negative "ts.tvsec" value...

CVE-2016-6244

CVE-2016-6244 concerns the OpenBSD kernel prior to patch level that contains the sys_thrsigdivert function in kern/kern_sig.c (OpenBSD 5.9). The vulnerability allows remote attackers to trigger a denial of service (kernel panic) by sending a negative ts.tv_sec value, as described in the NVD entry...

OpenBSD http server - denial of service vulnerability(CVE-2017-5850)

No description provided by source. !/usr/bin/perl -w curl --limit-rate 1 --continue-at 1 --header "Host: www.example.com" http://target/10mb.fs use warnings; use IO::Socket; use Parallel::ForkManager; $numforks = 50; if $ARGV \n"; sub killhttpd print "ATTACKING $ARGV0 using $numforks forks\n"; $p...