CVE-2016-6240: High severity openbsd vulnerability

Published Mar 7, 2017

Updated

Integer truncation error in the amapalloc function in OpenBSD 5.8 and 5.9 allows local users to execute arbitrary code with kernel privileges via a large size value.

Affected Software

2 affected components

OpenBSD OpenBSD=5.8

OpenBSD OpenBSD=5.9

Event History

Mar 7, 2017

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2016-6240?

CVE-2016-6240 is classified as a critical vulnerability due to its potential to allow local users to execute arbitrary code with kernel privileges.

How do I fix CVE-2016-6240?

To fix CVE-2016-6240, update to the latest version of OpenBSD that is not affected, specifically versions after 5.9.

What are the affected software versions for CVE-2016-6240?

The affected software versions for CVE-2016-6240 are OpenBSD 5.8 and OpenBSD 5.9.

Who can exploit CVE-2016-6240?

CVE-2016-6240 can be exploited by local users with the ability to pass a large size value to the amap_alloc function.

What is the impact of exploiting CVE-2016-6240?

Exploiting CVE-2016-6240 may lead to unauthorized execution of arbitrary code with elevated kernel privileges, compromising system security.