OpenBSD 5.8 and 5.9 allows local users to cause a denial of service (NULL pointer dereference and panic) via a sysctl call with a path starting with 10,9.
References
| Link | Resource |
|---|---|
| http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sys/kern/vfs_subr.c.diff?r1=1.248&r2=1.249 | Patch |
| http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sys/tmpfs/tmpfs_vfsops.c.diff?r1=1.9&r2=1.10 | Patch |
| http://www.openwall.com/lists/oss-security/2016/07/26/6 | Exploit Mailing List Third Party Advisory |
| http://www.openwall.com/lists/oss-security/2016/07/26/8 | Exploit Mailing List Third Party Advisory |
| http://www.securityfocus.com/bid/92140 | |
| http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sys/kern/vfs_subr.c.diff?r1=1.248&r2=1.249 | Patch |
| http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sys/tmpfs/tmpfs_vfsops.c.diff?r1=1.9&r2=1.10 | Patch |
| http://www.openwall.com/lists/oss-security/2016/07/26/6 | Exploit Mailing List Third Party Advisory |
| http://www.openwall.com/lists/oss-security/2016/07/26/8 | Exploit Mailing List Third Party Advisory |
| http://www.securityfocus.com/bid/92140 |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 02:55
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sys/kern/vfs_subr.c.diff?r1=1.248&r2=1.249 - Patch | |
| References | () http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sys/tmpfs/tmpfs_vfsops.c.diff?r1=1.9&r2=1.10 - Patch | |
| References | () http://www.openwall.com/lists/oss-security/2016/07/26/6 - Exploit, Mailing List, Third Party Advisory | |
| References | () http://www.openwall.com/lists/oss-security/2016/07/26/8 - Exploit, Mailing List, Third Party Advisory | |
| References | () http://www.securityfocus.com/bid/92140 - |
Information
Published : 2017-03-07 16:59
Updated : 2024-11-21 02:55
NVD link : CVE-2016-6350
Mitre link : CVE-2016-6350
CVE.ORG link : CVE-2016-6350
JSON object : View
Products Affected
openbsd
- openbsd
CWE
CWE-476
NULL Pointer Dereference