|
265661
|
7.5 |
HIGH
Network
|
debian libupnp_project
|
debian_linux libupnp
|
Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to write to arbitrary files in the webroot via a POST request without a registered handler.
|
CWE-284
Improper Access Control
|
CVE-2016-6255
|
2024-11-21 11:55 |
2017-03-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265662
|
5.5 |
MEDIUM
Local
|
openbsd
|
openbsd
|
OpenBSD 5.8 and 5.9 allows certain local users to cause a denial of service (kernel panic) by unmounting a filesystem with an open vnode on the mnt_vnodelist.
|
CWE-20
Improper Input Validation
|
CVE-2016-6247
|
2024-11-21 11:55 |
2017-03-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265663
|
4.4 |
MEDIUM
Local
|
openbsd
|
openbsd
|
OpenBSD 5.8 and 5.9 allows certain local users with kern.usermount privileges to cause a denial of service (kernel panic) by mounting a tmpfs with a VNOVAL in the (1) username, (2) groupname, or (3) …
|
CWE-20
Improper Input Validation
|
CVE-2016-6246
|
2024-11-21 11:55 |
2017-03-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265664
|
5.5 |
MEDIUM
Local
|
openbsd
|
openbsd
|
OpenBSD 5.8 and 5.9 allows local users to cause a denial of service (kernel panic) via a large size in a getdents system call.
|
NVD-CWE-noinfo
|
CVE-2016-6245
|
2024-11-21 11:55 |
2017-03-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265665
|
5.5 |
MEDIUM
Local
|
openbsd
|
openbsd
|
thrsleep in kern/kern_synch.c in OpenBSD 5.8 and 5.9 allows local users to cause a denial of service (kernel panic) via a crafted value in the tsp parameter of the __thrsleep system call.
|
CWE-20
Improper Input Validation
|
CVE-2016-6243
|
2024-11-21 11:55 |
2017-03-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265666
|
5.5 |
MEDIUM
Local
|
openbsd
|
openbsd
|
OpenBSD 5.8 and 5.9 allows local users to cause a denial of service (assertion failure and kernel panic) via a large ident value in a kevent system call.
|
CWE-189
Numeric Errors
|
CVE-2016-6242
|
2024-11-21 11:55 |
2017-03-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265667
|
7.8 |
HIGH
Local
|
openbsd
|
openbsd
|
Integer overflow in the amap_alloc1 function in OpenBSD 5.8 and 5.9 allows local users to execute arbitrary code with kernel privileges via a large size value.
|
CWE-190
Integer Overflow or Wraparound
|
CVE-2016-6241
|
2024-11-21 11:55 |
2017-03-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265668
|
7.8 |
HIGH
Local
|
openbsd
|
openbsd
|
Integer truncation error in the amap_alloc function in OpenBSD 5.8 and 5.9 allows local users to execute arbitrary code with kernel privileges via a large size value.
|
CWE-189
Numeric Errors
|
CVE-2016-6240
|
2024-11-21 11:55 |
2017-03-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265669
|
5.5 |
MEDIUM
Local
|
openbsd
|
openbsd
|
The mmap extension __MAP_NOFAULT in OpenBSD 5.8 and 5.9 allows attackers to cause a denial of service (kernel panic and crash) via a large size value.
|
CWE-20
Improper Input Validation
|
CVE-2016-6239
|
2024-11-21 11:55 |
2017-03-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265670
|
7.5 |
HIGH
Network
|
openbsd
|
openbsd
|
The sys_thrsigdivert function in kern/kern_sig.c in the OpenBSD kernel 5.9 allows remote attackers to cause a denial of service (panic) via a negative "ts.tv_sec" value.
|
CWE-20
Improper Input Validation
|
CVE-2016-6244
|
2024-11-21 11:55 |
2017-03-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|