Omniosce

Omnios

4 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.5

CVE-2021-43395

Exploit
  • EPSS 0.02%
  • Veröffentlicht 26.12.2022 06:15:10
  • Zuletzt bearbeitet 14.04.2025 16:15:17

An issue was discovered in illumos before f859e7171bb5db34321e45585839c6c3200ebb90, OmniOS Community Edition r151038, OpenIndiana Hipster 2021.04, and SmartOS 20210923. A local unprivileged user can cause a deadlock and kernel panic via crafted renam...

9.8

CVE-2020-27678

  • EPSS 0.46%
  • Veröffentlicht 26.10.2020 12:17:12
  • Zuletzt bearbeitet 21.11.2024 05:21:38

An issue was discovered in illumos before 2020-10-22, as used in OmniOS before r151030by, r151032ay, and r151034y and SmartOS before 20201022. There is a buffer overflow in parse_user_name in lib/libpam/pam_framework.c.

8.2

CVE-2020-24718

Exploit
  • EPSS 0.1%
  • Veröffentlicht 25.09.2020 04:23:04
  • Zuletzt bearbeitet 21.11.2024 05:15:57

bhyve, as used in FreeBSD through 12.1 and illumos (e.g., OmniOS CE through r151034 and OpenIndiana through Hipster 2020.04), does not properly restrict VMCS and VMCB read/write operations, as demonstrated by a root user in a container on an Intel sy...

7.8

CVE-2019-19396

  • EPSS 0.55%
  • Veröffentlicht 29.11.2019 22:15:12
  • Zuletzt bearbeitet 21.11.2024 04:34:43

illumos, as used in OmniOS Community Edition before r151030y, allows a kernel crash via an application with multiple threads calling sendmsg concurrently over a single socket, because uts/common/inet/ip/ip_attr.c mishandles conn_ixa dereferences.