Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2016-9032 Details

Description

An exploitable buffer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system. The vulnerability is present in the Ioctl system call with the command HYPRLOFS_ADD_ENTRIES when dealing with native file systems. An attacker can craft an input that can cause a buffer overflow in the nm variable leading to an out of bounds memory access and could result in potential privilege escalation. This vulnerability is distinct from CVE-2016-9034.

Metrics

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
http://www.securityfocus.com/bid/94923 CVEBroken LinkThird Party AdvisoryVDB Entry
http://www.talosintelligence.com/reports/TALOS-2016-0250/ CVEExploitThird Party AdvisoryVDB Entry
http://www.securityfocus.com/bid/94923 [email protected]Broken LinkThird Party AdvisoryVDB Entry
http://www.talosintelligence.com/reports/TALOS-2016-0250/ [email protected]ExploitThird Party AdvisoryVDB Entry

Weakness Enumeration

CWE-IDCWE NameSource
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')[email protected]

Affected Products

ProductVersions
joyent smartos
20161110t013148z

CPE

  • cpe:2.3:o:joyent:smartos:20161110t013148z:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

9 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2016-9032
NVD Published Date:
Dec 14, 2016
NVD Last Modified:
Jun 17, 2026
Source:
[email protected]
CVE-2016-9032 Details - Not Deferred