OpenBSD 'qsort()' Function Denial of Service Vulnerability

OpenBSD is a BSD-based UNIX-like operating system. A security vulnerability in the OpenBSD 'qsort' function allows an attacker to exploit the vulnerability to submit a special request, consume stack memory resources, and conduct a denial of service attack...

OpenBSD stack guard page security bypass vulnerability

OpenBSD is a BSD-based UNIX-like operating system. A security vulnerability in the implementation of the OpenBSD stack guard page allows an attacker to exploit the vulnerability to submit special requests, bypass security restrictions, and execute arbitrary code...

Visualizing the Stack Clash Vulnerability with Dashboards

Security teams should apply vendor patches immediately to protect their Linux, OpenBSD, NetBSD, FreeBSD and Solaris infrastructure from The Stack Clash vulnerability also see the security advisory. To help in that effort, this blog post describes a new built-in Qualys AssetView dashboard to...

Design/Logic Flaw

A flaw exists in OpenBSD's implementation of the stack guard page that allows attackers to bypass it resulting in arbitrary code execution using setuid binaries such as /usr/bin/at. This affects OpenBSD 6.1 and possibly earlier versions...

CVE-2017-1000372

A flaw exists in OpenBSD's implementation of the stack guard page that allows attackers to bypass it resulting in arbitrary code execution using setuid binaries such as /usr/bin/at. This affects OpenBSD 6.1 and possibly earlier versions...

CVE-2017-1000372

A flaw exists in OpenBSD's implementation of the stack guard page that allows attackers to bypass it resulting in arbitrary code execution using setuid binaries such as /usr/bin/at. This affects OpenBSD 6.1 and possibly earlier versions...

CVE-2017-1000373

The OpenBSD qsort function is recursive, and not randomized, an attacker can construct a pathological input array of N elements that causes qsort to deterministically recurse N/4 times. This allows attackers to consume arbitrary amounts of stack memory and manipulate stack memory to assist in...

Code injection

The OpenBSD qsort function is recursive, and not randomized, an attacker can construct a pathological input array of N elements that causes qsort to deterministically recurse N/4 times. This allows attackers to consume arbitrary amounts of stack memory and manipulate stack memory to assist in...

CVE-2017-1000373

The OpenBSD qsort function is recursive, and not randomized, an attacker can construct a pathological input array of N elements that causes qsort to deterministically recurse N/4 times. This allows attackers to consume arbitrary amounts of stack memory and manipulate stack memory to assist in...

CVE-2017-1000373

Technical details for CVE-2017-1000373 are not publicly available in the provided connected documents; the materials list the CVE but do not describe affected product/version/root-cause or fix. Monitor for updates.

CVE-2017-1000372

A flaw exists in OpenBSD's implementation of the stack guard page that allows attackers to bypass it resulting in arbitrary code execution using setuid binaries such as /usr/bin/at. This affects OpenBSD 6.1 and possibly earlier versions...

CVE-2017-1000372

OpenBSD stack guard page vulnerability (CVE-2017-1000372) allows bypass of the stack guard and arbitrary code execution via setuid binaries such as /usr/bin/at. Affected: OpenBSD 6.1 and possibly earlier. Root cause: improper implementation/handling of the stack guard page, enabling bypass under ...

CVE-2017-1000373

The OpenBSD qsort function is recursive, and not randomized, an attacker can construct a pathological input array of N elements that causes qsort to deterministically recurse N/4 times. This allows attackers to consume arbitrary amounts of stack memory and manipulate stack memory to assist in...

The vulnerability of the OpenBSD operating system, which allows a hacker to trigger a service failure

The vulnerability of the thrsleep function in the kernel/kernsynch.c file of the OpenBSD operating system exists due to insufficient checking of input data. Exploiting this vulnerability could allow a local attacker to cause a kernel panic by using a specially crafted value as the tsp parameter i...

The vulnerability of the OpenBSD operating system, which allows a hacker to execute arbitrary code

The vulnerability of the amapalloc1 function in the OpenBSD operating system is caused by a numerical overflow. Exploiting this vulnerability allows an attacker, operating locally, to execute arbitrary code with kernel privileges, using a value of a very large size...

The vulnerability of the OpenBSD operating system, which allows a hacker to trigger a service failure

The vulnerability of the OpenBSD operating system exists due to insufficient checking of input data. Exploiting this vulnerability allows a local attacker to cause a service failure a kernel crash by unmounting the file system and opening vnodes in the mntvnodelist...

The vulnerability of the OpenBSD operating system, which allows a hacker to trigger a service failure

The vulnerability of the systhrsigdiv function in the kernel/kernsig.c file in the OpenBSD operating system exists due to insufficient checking of input data. Exploiting this vulnerability could allow a malicious actor to cause a service failure by using the negative value of “ts.tvsec”...

The vulnerability of the OpenBSD operating system, which allows a hacker to trigger a service failure

The vulnerability of the mmap extension’s MAPNOFAULT flag in the OpenBSD operating system exists due to insufficient checks on input data. Exploiting this vulnerability allows a local attacker to cause a kernel panic by using a large value...

The vulnerability of the OpenBSD operating system, which allows a hacker to execute arbitrary code

The vulnerability of the amapalloc function in the OpenBSD operating system is related to errors in number processing. Exploiting this vulnerability allows a local attacker to execute arbitrary code with kernel privileges, using a value of a very large size...

The vulnerability of the OpenBSD operating system, which allows a hacker to trigger a service failure

The vulnerability of the OpenBSD operating system exists due to insufficient checks on input data. Exploiting this vulnerability allows a person with privileged mounting functions, who operates locally, to cause a service failure a kernel crash by mounting a temporary file system with values of 1...