CVE-2016-9040

An exploitable denial of service exists in the the Joyent SmartOS OS 20161110T013148Z Hyprlofs file system

Medium · published September 7, 2018

CVSS v3.0
6.2
EPSS
0%
Percentile
39.6
In the wild
Unconfirmed
What it is

An exploitable denial of service exists in the the Joyent SmartOS OS 20161110T013148Z Hyprlofs file system. The vulnerability is present in the Ioctl system call with the command HYPRLOFSADDENTRIES when used with a 32 bit model. An attacker can cause a buffer to be allocated and never freed. When repeatedly exploit this will result in memory exhaustion, resulting in a full system denial of service.

The record
Technical detail
CVSS v3.0
6.2 · MEDIUM
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00473 · 39.6th percentile
Published
2018-09-07T12:00Z
EPSS history
Timeline
  • 07 SEP 12:00Z
    An exploitable denial of service exists in the the Joyent SmartOS OS 20161110T013148Z Hyprlofs file system
    cvelistv5