Joyent SmartOS 20170803-20170803T064301Z

CPE Details

Joyent SmartOS 20170803-20170803T064301Z
joyent
smartos
20170803-20170803t064301z
2018-04-17
13h37 +00:00
2021-07-09
12h38 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:o:joyent:smartos:20170803-20170803t064301z:*:*:*:*:*:*:*

Informations

Vendor

joyent

Product

smartos

Version

20170803-20170803t064301z

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2020-27678 2020-10-23 18h25 +00:00 An issue was discovered in illumos before 2020-10-22, as used in OmniOS before r151030by, r151032ay, and r151034y and SmartOS before 20201022. There is a buffer overflow in parse_user_name in lib/libpam/pam_framework.c.
9.8
Critique
CVE-2018-1171 2018-03-19 17h00 +00:00 This vulnerability allows local attackers to escalate privileges on vulnerable installations of Joyent SmartOS release-20170803-20170803T064301Z. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the DTrace DOF files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated object. An attacker can leverage this vulnerability to execute code under the context of the host OS. Was ZDI-CAN-5106.
7
Haute