CVE-2016-9031 - CVE House
Back to Database
Status published High CVE-2016-9031

An exploitable integer overflow exists in the Joyent SmartOS 20161110T013148Z...

Vulnerability Description

An exploitable integer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system. The vulnerability is present in the Ioctl system call with the command HYPRLOFS_ADD_ENTRIES when dealing with 32-bit file systems. An attacker can craft an input that can cause a kernel panic and potentially be leveraged into a full privilege escalation vulnerability. This vulnerability is distinct from CVE-2016-8733.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2016-9031

Credits & Attribution

No credits recorded in the NVD database.

References

More from Joyent

View All →
CVE-2018-1171
This vulnerability allows local attackers to escalate privileges on vulnerable...
High 7
CVE-2018-1166
This vulnerability allows local attackers to escalate privileges on vulnerable...
High 7.8
CVE-2018-1165
This vulnerability allows local attackers to escalate privileges on vulnerable...
High 7
CVE-2017-10940
This vulnerability allows remote attackers to execute arbitrary code on...
High 8.8
CVE-2016-9040
An exploitable denial of service exists in the the Joyent...
Medium 6.2

Affected Vendor

Affected Software

SmartOS
Vulnerable Versions:
OS 20161110T013148Z

Timeline

Official Publish: December 14th, 2016
Last Modified: August 6th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.