CVE-2018-1171

Name of the Vulnerable Software and Affected Versions Joyent SmartOS release-20170803-20170803T064301Z

Description This issue allows local attackers to escalate privileges on vulnerable installations. An attacker must first obtain the ability to execute low-privileged code on the target system. The specific flaw exists within the DTrace DOF files due to the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated object. This can be leveraged to execute code under the context of the host OS.

Recommendations For Joyent SmartOS release-20170803-20170803T064301Z, at the moment, there is no information about a newer version that contains a fix for this vulnerability.