CVE-2016-9040 - CVE House
Back to Database
Status published Medium CVE-2016-9040

An exploitable denial of service exists in the the Joyent...

Vulnerability Description

An exploitable denial of service exists in the the Joyent SmartOS OS 20161110T013148Z Hyprlofs file system. The vulnerability is present in the Ioctl system call with the command HYPRLOFSADDENTRIES when used with a 32 bit model. An attacker can cause a buffer to be allocated and never freed. When repeatedly exploit this will result in memory exhaustion, resulting in a full system denial of service.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2016-9040

Credits & Attribution

No credits recorded in the NVD database.

References

More from Joyent

View All →
CVE-2018-1171
This vulnerability allows local attackers to escalate privileges on vulnerable...
High 7
CVE-2018-1166
This vulnerability allows local attackers to escalate privileges on vulnerable...
High 7.8
CVE-2018-1165
This vulnerability allows local attackers to escalate privileges on vulnerable...
High 7
CVE-2017-10940
This vulnerability allows remote attackers to execute arbitrary code on...
High 8.8
CVE-2016-9039
An exploitable denial of service exists in the Joyent SmartOS...
Medium 6.2

Affected Vendor

Affected Software

SmartOS
Vulnerable Versions:
20161110T013148Z

Timeline

Official Publish: September 7th, 2018
Last Modified: September 16th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.