PT-2017-1727
CVE-2016-6241
·
تاريخ النشر
2017-03-07
·
تاريخ التحديث
2017-09-01
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
OpenBSD versions 5.8 through 5.9
Description
The issue is caused by an integer overflow in the
amap alloc1 function, which allows local users to execute arbitrary code with kernel privileges by providing a large size value. This can be exploited to gain elevated access to the system.Recommendations
For OpenBSD versions 5.8 and 5.9, consider restricting access to the
amap alloc1 function until a patch is available.
As a temporary workaround, avoid using large size values that could trigger the integer overflow in the amap alloc1 function.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾