CVE-2016-6239

Name of the Vulnerable Software and Affected Versions OpenBSD versions 5.8 through 5.9

Description The issue allows attackers to cause a denial of service, resulting in a kernel panic and crash, by exploiting the mmap extension MAP NOFAULT with a large size value. This is due to insufficient input validation in the mmap extension. The exploitation can be performed by a local attacker.

Recommendations For OpenBSD versions 5.8 and 5.9, consider restricting the use of the mmap extension MAP NOFAULT until a patch is available to prevent potential denial of service attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.