Code injection

The mmap extension MAPNOFAULT in OpenBSD 5.8 and 5.9 allows attackers to cause a denial of service kernel panic and crash via a large size value...

Integer overflow

Integer overflow in the uvmmapisavail function in uvm/uvmmap.c in OpenBSD 5.9 allows local users to cause a denial of service kernel panic via a crafted mmap call, which triggers the new mapping to overlap with an existing mapping...

Open redirect

OpenBSD 5.8 and 5.9 allows certain local users to cause a denial of service kernel panic by unmounting a filesystem with an open vnode on the mntvnodelist...

CVE-2016-6245

OpenBSD 5.8 and 5.9 allows local users to cause a denial of service kernel panic via a large size in a getdents system call...

CVE-2016-6246

OpenBSD 5.8 and 5.9 allows certain local users with kern.usermount privileges to cause a denial of service kernel panic by mounting a tmpfs with a VNOVAL in the 1 username, 2 groupname, or 3 device name of the root node...

CVE-2016-6243

thrsleep in kern/kernsynch.c in OpenBSD 5.8 and 5.9 allows local users to cause a denial of service kernel panic via a crafted value in the tsp parameter of the thrsleep system call...

CVE-2016-6239

The mmap extension MAPNOFAULT in OpenBSD 5.8 and 5.9 allows attackers to cause a denial of service kernel panic and crash via a large size value...

CVE-2016-6240

Integer truncation error in the amapalloc function in OpenBSD 5.8 and 5.9 allows local users to execute arbitrary code with kernel privileges via a large size value...

CVE-2016-6522

Integer overflow in the uvmmapisavail function in uvm/uvmmap.c in OpenBSD 5.9 allows local users to cause a denial of service kernel panic via a crafted mmap call, which triggers the new mapping to overlap with an existing mapping...

CVE-2016-6350

OpenBSD 5.8 and 5.9 allows local users to cause a denial of service NULL pointer dereference and panic via a sysctl call with a path starting with 10,9...

CVE-2016-6240

Integer truncation error in the amapalloc function in OpenBSD 5.8 and 5.9 allows local users to execute arbitrary code with kernel privileges via a large size value...

CVE-2016-6239

The mmap extension MAPNOFAULT in OpenBSD 5.8 and 5.9 allows attackers to cause a denial of service kernel panic and crash via a large size value...

Information disclosure

OpenBSD 5.8 and 5.9 allows local users to cause a denial of service kernel panic via a large size in a getdents system call...

CVE-2016-6350

OpenBSD 5.8 and 5.9 allows local users to cause a denial of service NULL pointer dereference and panic via a sysctl call with a path starting with 10,9...

CVE-2016-6242

OpenBSD 5.8 and 5.9 allows local users to cause a denial of service assertion failure and kernel panic via a large ident value in a kevent system call...

CVE-2016-6247

OpenBSD 5.8 and 5.9 allows certain local users to cause a denial of service kernel panic by unmounting a filesystem with an open vnode on the mntvnodelist...

CVE-2016-6522

Integer overflow in the uvmmapisavail function in uvm/uvmmap.c in OpenBSD 5.9 allows local users to cause a denial of service kernel panic via a crafted mmap call, which triggers the new mapping to overlap with an existing mapping...

CVE-2016-6241

Integer overflow in the amapalloc1 function in OpenBSD 5.8 and 5.9 allows local users to execute arbitrary code with kernel privileges via a large size value...

CVE-2016-6245

OpenBSD 5.8 and 5.9 allows local users to cause a denial of service kernel panic via a large size in a getdents system call...

CVE-2016-6350

OpenBSD 5.8 and 5.9 allows local users to cause a denial of service NULL pointer dereference and panic via a sysctl call with a path starting with 10,9...