CVE-2016-1885
- State
- Published
- Severity
- Not scored
- Published
- Apr 8, 2016
- Updated
- Aug 5, 2024
- Reserved
- Jan 13, 2016
Description
Integer signedness error in the amd64_set_ldt function in sys/amd64/amd64/sys_machdep.c in FreeBSD 9.3 before p39, 10.1 before p31, and 10.2 before p14 allows local users to cause a denial of service (kernel panic) via an i386_set_ldt system call, which triggers a heap-based buffer overflow.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 39570exploit
- FreeBSD-SA-16:15vendor-advisory
- http://www.coresecurity.com/advisories/freebsd-kernel-amd64setldt-heap-overflow
- 20160316 [CORE-2016-0005] - FreeBSD Kernel amd64_set_ldt Heap Overflowmailing-list
- 20160317 Re: [CORE-2016-0005] - FreeBSD Kernel amd64_set_ldt Heap Overflowmailing-list
- 1035309vdb-entry
- 20160316 Re: [FD] [CORE-2016-0005] - FreeBSD Kernel amd64_set_ldt Heap Overflowmailing-list
- 20160316 [CORE-2016-0005] - FreeBSD Kernel amd64_set_ldt Heap Overflowmailing-list
- http://packetstormsecurity.com/files/136276/FreeBSD-Kernel-amd64_set_ldt-Heap-Overflow.html
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.