PT-2017-1727 · Openbsd · Openbsd

Jesse Hertz · Publicado 2017-03-07 · Atualizado 2017-09-01 · CVE-2016-6241

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenBSD versions 5.8 through 5.9

Description The issue is caused by an integer overflow in the amap alloc1 function, which allows local users to execute arbitrary code with kernel privileges by providing a large size value. This can be exploited to gain elevated access to the system.

Recommendations For OpenBSD versions 5.8 and 5.9, consider restricting access to the amap alloc1 function until a patch is available. As a temporary workaround, avoid using large size values that could trigger the integer overflow in the amap alloc1 function.

Exploit

Correção

Integer Overflow

Enumeração de Fraquezas

CWE-190

Identificadores relacionados

BDU:2017-00880

CVE-2016-6241

Produtos afetados

Openbsd

Referências · 9

• 🔥 http://openwall.com/lists/oss-security/2016/07/17/7 · Exploit
• http://openbsd.org/errata58.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-6241 · Nota de Segurança
• http://openwall.com/lists/oss-security/2016/07/14/5 · Nota
• http://securitytracker.com/id/1036318 · Nota
• http://securityfocus.com/bid/91805 · Nota
• https://bdu.fstec.ru/vul/2017-00880 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-6241 · Aviso do Fabricante
• http://openbsd.org/errata59.html · Nota