PT-2017-1722 · Openbsd · Openbsd

Jesse Hertz · Published 2017-03-07 · Updated 2017-03-09 · CVE-2016-6246

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions OpenBSD versions 5.8 through 5.9

Description The issue allows certain local users with kern.usermount privileges to cause a denial of service, resulting in a kernel panic. This can be achieved by mounting a tmpfs with a VNOVAL in the username, groupname, or device name of the root node. The problem exists due to insufficient input validation.

Recommendations For OpenBSD versions 5.8 and 5.9, consider restricting the kern.usermount privileges to prevent local users from mounting tmpfs with malicious settings until a patch is available. As a temporary workaround, avoid using VNOVAL in the username, groupname, or device name of the root node when mounting a tmpfs.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2017-00875

CVE-2016-6246

Affected Products

Openbsd

References · 8

• 🔥 http://openwall.com/lists/oss-security/2016/07/17/7 · Exploit
• https://bdu.fstec.ru/vul/2017-00875 · Security Note
• https://osv.dev/vulnerability/CVE-2016-6246 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-6246 · Security Note
• http://openbsd.org/errata58.html · Note
• http://openwall.com/lists/oss-security/2016/07/14/5 · Note
• http://securityfocus.com/bid/91805 · Note
• http://openbsd.org/errata59.html · Note