Joyent SmartOS 20170803

CPE Details

Joyent SmartOS 20170803
joyent
smartos
20170803
2020-08-13
15h36 +00:00
2020-08-13
15h36 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:o:joyent:smartos:20170803:*:*:*:*:*:*:*

Informations

Vendor

joyent

Product

smartos

Version

20170803

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2020-27678 2020-10-23 18h25 +00:00 An issue was discovered in illumos before 2020-10-22, as used in OmniOS before r151030by, r151032ay, and r151034y and SmartOS before 20201022. There is a buffer overflow in parse_user_name in lib/libpam/pam_framework.c.
9.8
Critical
CVE-2018-1165 2018-02-21 13h00 +00:00 This vulnerability allows local attackers to escalate privileges on vulnerable installations of Joyent SmartOS release-20170803-20170803T064301Z. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the SMB_IOC_SVCENUM IOCTL. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length, heap-based buffer. An attacker can leverage this vulnerability to execute code under the context of the host OS. Was ZDI-CAN-4983.
7
High
CVE-2018-1166 2018-02-21 13h00 +00:00 This vulnerability allows local attackers to escalate privileges on vulnerable installations of Joyent SmartOS release-20170803-20170803T064301Z. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the SMBIOC_TREE_RELE ioctl. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the host OS. Was ZDI-CAN-4984.
7.8
High