Vendors / OmniOS Records 9 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 0
Exploited now OmniOS records in CISA KEV No OmniOS vulnerabilities are listed in CISA KEV.
Priority MEDIUM 49
The illumos SCTP inbound path performs association lookup for INIT ACK chunks without adequately validating the address parameters carried in the chunk.
CVSS 4.0 CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00882 · Published 2026-07-16 · Fixed in r151058j, r151056aj +2 CWE-122
Priority LOW 29
A missing release of resources in the illumos name service cache daemon (nscd) allows a local user to exhaust kernel memory.
CVSS 4.0 MEDIUM 6.8· Local · Low privileges · No interaction · EPSS 0.00116 · Published 2026-10-09 · Fixed in r151058w, r151056aw +1 CWE-772
Priority LOW 29
A reachable assertion in the illumos bhyve instruction emulator allows a guest to panic the host.
CVSS 4.0 MEDIUM 6.8· Local · Low privileges · No interaction · EPSS 0.00123 · Published 2026-10-09 · Fixed in r151058w, r151056aw +1 CWE-617
Priority LOW 25
A time-of-check to time-of-use (TOCTOU) flaw in the illumos data-link pseudo-driver (dld) affects handling of the DLDIOC_GETMACPROP and DLDIOC_SETMACPROP ioctls on /dev/dld.
CVSS 4.0 MEDIUM 5.8· Local · Low privileges · No interaction · EPSS 0.00116 · Published 2026-07-16 · Fixed in r151058j, r151056aj +2 CWE-122
Priority LOW 23
A stack-based buffer overflow in the illumos reparse point daemon (reparsed) allows a local user to crash the daemon.
CVSS 4.0 MEDIUM 5.4· Local · Low privileges · No interaction · EPSS 0.00137 · Published 2026-10-09 · Fixed in r151058w, r151056aw +1 CWE-121
Priority LOW 23
A NULL pointer dereference in the illumos Network Auto-Magic daemon (nwamd) allows a local user to crash the daemon.
CVSS 4.0 MEDIUM 5.4· Local · Low privileges · No interaction · EPSS 0.00116 · Published 2026-10-09 · Fixed in r151058w, r151056aw +1 CWE-476
Priority LOW 23
A double free in the IP management daemon (ipmgmtd) of OmniOS and SmartOS allows a local user to crash the daemon.
CVSS 4.0 MEDIUM 5.4· Local · Low privileges · No interaction · EPSS 0.00116 · Published 2026-10-09 · Fixed in r151058w, r151056aw +1 CWE-415
Priority LOW 9
A missing authorization check in the illumos IP management daemon (ipmgmtd) allows a local user to change the persistent IP multipathing (IPMP) configuration.
CVSS 4.0 LOW 1.9· Local · Low privileges · No interaction · EPSS 0.00106 · Published 2026-10-09 · Fixed in r151058w, r151056aw +1 CWE-862
Priority LOW 9
A missing authorization check in the illumos zones statistics daemon (zonestatd) allows a local user in any zone to disrupt zonestat in other zones and to determine which zones are running.
CVSS 4.0 LOW 1.9· Local · Low privileges · No interaction · EPSS 0.00106 · Published 2026-10-09 · Fixed in r151058w, r151056aw +1 CWE-862
Open these records in search → All records by CVSS severity
1 0 6 2 0
THREATIST.IORead the docs