CVE-2016-1886: Buffer Overflow
Integer signedness error in the genkbdcommonioctl function in sys/dev/kbd/kbd.c in FreeBSD 9.3 before p42, 10.1 before p34, 10.2 before p17, and 10.3 before p3 allows local users to obtain sensitive information from kernel memory, cause a denial of service (memory overwrite and kernel crash), or gain privileges via a negative value in the flen structure member in the arg argument in a SETFKEY ioctl call, which triggers a "two way heap and stack overflow."
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-1886?
CVE-2016-1886 is considered to have a high severity due to its potential impact on system security and stability.
How do I fix CVE-2016-1886?
To fix CVE-2016-1886, upgrade FreeBSD to versions 9.3-p42, 10.1-p34, 10.2-p17, or 10.3-p3 or later.
What types of vulnerabilities does CVE-2016-1886 introduce?
CVE-2016-1886 introduces risks of sensitive information disclosure, denial of service, and potential kernel crashes.
Who is affected by CVE-2016-1886?
Local users of vulnerable FreeBSD versions are affected by CVE-2016-1886.
What is the cause of CVE-2016-1886?
CVE-2016-1886 is caused by an integer signedness error in the genkbd_commonioctl function in FreeBSD.