| Vulnerability Name: | CVE-2016-6239 (CCN-115474) | ||||||||||||
| Assigned: | 2016-06-27 | ||||||||||||
| Published: | 2016-06-27 | ||||||||||||
| Updated: | 2017-09-01 | ||||||||||||
| Summary: | The mmap extension __MAP_NOFAULT in OpenBSD 5.8 and 5.9 allows attackers to cause a denial of service (kernel panic and crash) via a large size value. | ||||||||||||
| CVSS v3 Severity: | 5.5 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) 4.8 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)
5.4 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)
| ||||||||||||
| CVSS v2 Severity: | 4.9 Medium (CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C)
| ||||||||||||
| Vulnerability Type: | CWE-20 | ||||||||||||
| Vulnerability Consequences: | Denial of Service | ||||||||||||
| References: | Source: MITRE Type: CNA CVE-2016-6239 Source: CCN Type: OpenBSD Web site OpenBSD 5.8 Source: CCN Type: OpenBSD Web site OpenBSD 5.9 Source: CCN Type: OpenBSD Web site OpenBSD 5.9 Source: CONFIRM Type: Release Notes http://www.openbsd.org/errata58.html Source: CONFIRM Type: Release Notes http://www.openbsd.org/errata59.html Source: MLIST Type: Mailing List, Third Party Advisory [oss-security] 20160714 Multiple Bugs in OpenBSD Kernel Source: MLIST Type: Exploit, Mailing List, Third Party Advisory [oss-security] 20160717 ReL Multiple Bugs in OpenBSD Kernel Source: BID Type: UNKNOWN 91805 Source: SECTRACK Type: UNKNOWN 1036318 Source: XF Type: UNKNOWN openbsd-cve20166239-dos(115474) | ||||||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||||||
| BACK | |||||||||||||