CVE-2016-9039 - CVE House
Back to Database
Status published Medium CVE-2016-9039

An exploitable denial of service exists in the Joyent SmartOS...

Vulnerability Description

An exploitable denial of service exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system. The vulnerability is present in the Ioctl system call with the command HYPRLOFS_ADD_ENTRIES. An attacker can cause a buffer to be allocated and never freed. When repeatedly exploited this will result in memory exhaustion, resulting in a full system denial of service.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2016-9039

Credits & Attribution

No credits recorded in the NVD database.

References

More from Joyent

View All →
CVE-2018-1171
This vulnerability allows local attackers to escalate privileges on vulnerable...
High 7
CVE-2018-1166
This vulnerability allows local attackers to escalate privileges on vulnerable...
High 7.8
CVE-2018-1165
This vulnerability allows local attackers to escalate privileges on vulnerable...
High 7
CVE-2017-10940
This vulnerability allows remote attackers to execute arbitrary code on...
High 8.8
CVE-2016-9040
An exploitable denial of service exists in the the Joyent...
Medium 6.2

Affected Vendor

Affected Software

SmartOS
Vulnerable Versions:
OS 20161110T013148Z

Timeline

Official Publish: January 31st, 2017
Last Modified: August 6th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.