CVE-2016-8733

Published: Dec 14, 2016Modified: May 6, 2026

8.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Exploitability: 2.0 / Impact: 6.0

Source: NVD

Description

An exploitable integer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system. The vulnerability is present in the Ioctl system call with the command HYPRLOFS_ADD_ENTRIES when dealing with native file systems. An attacker can craft an input that can cause a kernel panic and potentially be leveraged into a full privilege escalation vulnerability. This vulnerability is distinct from CVE-2016-9031.

Affected (1)

Products: Joyent: Smartos

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Joyent Smartos	Up to 20161110t013148z

Related CWEs

Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (4)

http://www.securityfocus.com/bid/94920

Source: talos-cna@cisco.com

Broken LinkThird Party AdvisoryVDB Entry

http://www.talosintelligence.com/reports/TALOS-2016-0248/

Source: talos-cna@cisco.com

ExploitThird Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/94920

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkThird Party AdvisoryVDB Entry

http://www.talosintelligence.com/reports/TALOS-2016-0248/

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party AdvisoryVDB Entry

Timeline

No history available yet.