Illumos OS Vulnerability in Bcopy and Bzero Implementations
CVE-2016-6560

8.6HIGH

Key Information:

Vendor

Illumos

Status
Osnet-incorporation
Vendor
CVE Published:
31 March 2017

What is CVE-2016-6560?

A vulnerability exists in the Illumos operating system related to the implementations of bcopy() and bzero(). These functions perform signed instead of unsigned comparisons, which may lead to unexpected behavior or allow an attacker to crash the system. This flaw highlights the importance of robust input validation mechanisms in software design to prevent system instability.

Affected Version(s)

osnet-incorporation proir to osnet-incorporation@0.5.11,5.11-2016.0.1.15933

References

https://www.illumos.org/issues/7488
x_refsource_CONFIRM
https://github.com/illumos/illumos-gate/commit/5aaab1a496...
x_refsource_CONFIRM
https://www.openindiana.org/2016/11/01/cve-2016-6560-cve-...
x_refsource_CONFIRM

CVSS V3.1

Score:
8.6
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.