An exploitable integer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system. The vulnerability is present in the Ioctl system call with the command HYPRLOFS_ADD_ENTRIES when dealing with 32-bit file systems. An attacker can craft an input that can cause a kernel panic and potentially be leveraged into a full privilege escalation vulnerability. This vulnerability is distinct from CVE-2016-8733.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: talos

Published: 2016-12-14T17:00:00

Updated: 2024-08-06T02:35:02.561Z

Reserved: 2016-10-26T00:00:00

Link: CVE-2016-9031

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2016-12-14T17:59:02.080

Modified: 2024-11-21T03:00:28.450

Link: CVE-2016-9031

cve-icon Redhat

No data.