CVE-2021-43395

CVE-2021-43395 affects illumos before f859e7171bb5db34321e45585839c6c3200ebb90, OmniOS CE r151038, OpenIndiana Hipster 2021.04, and SmartOS 20210923, plus Oracle Solaris 10/11. The issue allows a local unprivileged user to trigger a deadlock and kernel panic by issuing crafted rename and rmdir op...

CVE-2020-24718

CVE-2020-24718 affects bhyve in FreeBSD (through 12.x) and related illumos variants (e.g., OmniOS CE, OpenIndiana). The issue is insufficient access controls on Intel VMCS/VMCB structures, allowing a root user in a container (host or jailed bhyve instance) to modify VMCS_HOST_RIP and escalate to ...

CVE-2019-19396

CVE-2019-19396 affects illumos-based OmniOS Community Edition before r151030y. The issue is a kernel crash triggered when an application uses multiple threads calling sendmsg concurrently over a single socket, due to incorrect handling of conn_ixa dereferences in uts/common/inet/ip/ip_attr.c. Pub...

CVE-2020-27678

CVE-2020-27678 affects illumos up to 2020-10-22 (as used in OmniOS prior to r151030by, r151032ay, r151034y and SmartOS prior to 20201022). The issue is a buffer overflow in parse_user_name within lib/libpam/pam_framework.c. Connected records corroborate this across NVD and vendor pages, confirmin...