CVE-2016-6350

Опубликовано: 07 мар. 2017

Источник: nvd

CVSS3: 5.5

CVSS2: 4.9

EPSS Низкий

Описание

OpenBSD 5.8 and 5.9 allows local users to cause a denial of service (NULL pointer dereference and panic) via a sysctl call with a path starting with 10,9.

Ссылки

http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sys/kern/vfs_subr.c.diff?r1=1.248&r2=1.249
Patch
http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sys/tmpfs/tmpfs_vfsops.c.diff?r1=1.9&r2=1.10
Patch
http://www.openwall.com/lists/oss-security/2016/07/26/6
Exploit
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/07/26/8
Exploit
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/92140
http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sys/kern/vfs_subr.c.diff?r1=1.248&r2=1.249
Patch
http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sys/tmpfs/tmpfs_vfsops.c.diff?r1=1.9&r2=1.10
Patch
http://www.openwall.com/lists/oss-security/2016/07/26/6
Exploit
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/07/26/8
Exploit
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/92140

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:openbsd:openbsd:5.8:*:*:*:*:*:*:*

cpe:2.3:o:openbsd:openbsd:5.9:*:*:*:*:*:*:*

EPSS

Процентиль: 35%

0.00145

Низкий

5.5 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-476

Связанные уязвимости

GHSA-3696-mpwc-5fpg