CVE-2016-6243: Input Validation
Published Mar 7, 2017
·Updated
thrsleep in kern/kernsynch.c in OpenBSD 5.8 and 5.9 allows local users to cause a denial of service (kernel panic) via a crafted value in the tsp parameter of the thrsleep system call.
Affected Software
2 affected components
OpenBSD OpenBSD=5.8
OpenBSD OpenBSD=5.9
Event History
Mar 7, 2017
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-6243?
CVE-2016-6243 is classified as a critical vulnerability due to its potential to cause a kernel panic.
2
How do I fix CVE-2016-6243?
To mitigate CVE-2016-6243, it is recommended to upgrade to OpenBSD version 5.10 or later.
3
What systems are affected by CVE-2016-6243?
CVE-2016-6243 affects OpenBSD versions 5.8 and 5.9.
4
What is the impact of CVE-2016-6243?
The impact of CVE-2016-6243 is a denial of service condition resulting from a kernel panic.
5
Who can exploit CVE-2016-6243?
CVE-2016-6243 can be exploited by local users who have access to the system.