PT-2017-1727

CVE-2016-6241

·

Published

2017-03-07

·

Updated

2017-09-01

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions OpenBSD versions 5.8 through 5.9
Description The issue is caused by an integer overflow in the amap alloc1 function, which allows local users to execute arbitrary code with kernel privileges by providing a large size value. This can be exploited to gain elevated access to the system.
Recommendations For OpenBSD versions 5.8 and 5.9, consider restricting access to the amap alloc1 function until a patch is available. As a temporary workaround, avoid using large size values that could trigger the integer overflow in the amap alloc1 function.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾