CVE-2016-1885: Buffer Overflow

Published Apr 8, 2016

Updated

Integer signedness error in the amd64setldt function in sys/amd64/amd64/sysmachdep.c in FreeBSD 9.3 before p39, 10.1 before p31, and 10.2 before p14 allows local users to cause a denial of service (kernel panic) via an i386setldt system call, which triggers a heap-based buffer overflow.

Affected Software

3 affected components

FreeBSD FreeBSD=9.3

FreeBSD FreeBSD=10.1

FreeBSD FreeBSD=10.2

Event History

Apr 8, 2016

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2016-1885?

CVE-2016-1885 is considered a critical vulnerability because it can lead to a denial of service through a kernel panic.

How do I fix CVE-2016-1885?

To fix CVE-2016-1885, upgrade FreeBSD to version 9.3-p39, 10.1-p31, or 10.2-p14 or later.

What software is affected by CVE-2016-1885?

CVE-2016-1885 affects FreeBSD versions 9.3, 10.1, and 10.2 prior to their respective patch releases.

What type of vulnerability is CVE-2016-1885?

CVE-2016-1885 is a heap-based buffer overflow vulnerability caused by an integer signedness error.

Can CVE-2016-1885 be exploited remotely?

CVE-2016-1885 requires local user access for exploitation, making it a local denial of service issue.