CVE-2016-9035: Buffer Overflow
An exploitable buffer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system. The vulnerability is present in the Ioctl system call with the command HYPRLOFSADDENTRIES when dealing with native file systems. An attacker can craft an input that can cause a buffer overflow in the path variable leading to an out of bounds memory access and could result in potential privilege escalation. This vulnerability is distinct from CVE-2016-9033.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-9035?
CVE-2016-9035 is classified as a critical severity vulnerability due to its potential for exploitation through buffer overflow.
How do I fix CVE-2016-9035?
To mitigate CVE-2016-9035, upgrade to a version of Joyent SmartOS that addresses the buffer overflow vulnerability.
Which versions of Joyent SmartOS are affected by CVE-2016-9035?
CVE-2016-9035 affects Joyent SmartOS version 20161110T013148Z.
What is the impact of exploiting CVE-2016-9035?
Exploitation of CVE-2016-9035 can allow an attacker to execute arbitrary code in the context of the affected system.
What components are involved in CVE-2016-9035?
CVE-2016-9035 involves the Hyprlofs file system and the Ioctl system call with the command HYPRLOFS_ADD_ENTRIES.