An exploitable buffer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system. The vulnerability is present in the Ioctl system call with the command HYPRLOFS_ADD_ENTRIES when dealing with native file systems. An attacker can craft an input that can cause a buffer overflow in the path variable leading to an out of bounds memory access and could result in potential privilege escalation. This vulnerability is distinct from CVE-2016-9035.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: talos

Published: 2016-12-14T17:00:00

Updated: 2024-08-06T02:42:09.431Z

Reserved: 2016-10-26T00:00:00

Link: CVE-2016-9033

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2016-12-14T17:59:05.817

Modified: 2022-12-13T19:35:15.247

Link: CVE-2016-9033

cve-icon Redhat

No data.