CVE-2016-6242: Medium severity openbsd vulnerability
Published Mar 7, 2017
·Updated
OpenBSD 5.8 and 5.9 allows local users to cause a denial of service (assertion failure and kernel panic) via a large ident value in a kevent system call.
Affected Software
2 affected components
OpenBSD OpenBSD=5.8
OpenBSD OpenBSD=5.9
Event History
Mar 7, 2017
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-6242?
CVE-2016-6242 is classified as a denial-of-service vulnerability that can result in kernel panic on affected OpenBSD systems.
2
How do I fix CVE-2016-6242?
To remediate CVE-2016-6242, users should upgrade their OpenBSD systems to versions 5.8 or 5.9 with the appropriate patches applied.
3
Which versions of OpenBSD are affected by CVE-2016-6242?
CVE-2016-6242 affects OpenBSD versions 5.8 and 5.9.
4
What causes the vulnerability in CVE-2016-6242?
CVE-2016-6242 is caused by a local user sending a large ident value in a kevent system call, leading to assertion failures.
5
Can CVE-2016-6242 be exploited remotely?
No, CVE-2016-6242 can only be exploited locally by authenticated users on the affected OpenBSD systems.