CVE-2016-9033: Buffer Overflow
An exploitable buffer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system. The vulnerability is present in the Ioctl system call with the command HYPRLOFSADDENTRIES when dealing with native file systems. An attacker can craft an input that can cause a buffer overflow in the path variable leading to an out of bounds memory access and could result in potential privilege escalation. This vulnerability is distinct from CVE-2016-9035.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-9033?
CVE-2016-9033 has been assigned a high severity rating due to the potential for remote code execution through a buffer overflow.
How do I fix CVE-2016-9033?
To fix CVE-2016-9033, update your Joyent SmartOS to a version released after the vulnerability was addressed.
What are the potential impacts of CVE-2016-9033?
The impacts of CVE-2016-9033 include the possibility of an attacker executing arbitrary code on the affected system.
Who is affected by CVE-2016-9033?
CVE-2016-9033 affects users running Joyent SmartOS version 20161110T013148Z.
Is there a known exploit for CVE-2016-9033?
Yes, there are known exploits for CVE-2016-9033 that can leverage the buffer overflow in the Ioctl system call.