Priority LOW 23
A stack-based buffer overflow in the illumos reparse point daemon (reparsed) allows a local user to crash the daemon.
Vulnerabilities
16 records
Priority LOW 23
A NULL pointer dereference in the illumos Network Auto-Magic daemon (nwamd) allows a local user to crash the daemon.
Priority LOW 29
A missing release of resources in the illumos name service cache daemon (nscd) allows a local user to exhaust kernel memory.
Priority LOW 9
A missing authorization check in the illumos zones statistics daemon (zonestatd) allows a local user in any zone to disrupt zonestat in other zones and to determine which zones are running.
Priority LOW 9
A missing authorization check in the illumos IP management daemon (ipmgmtd) allows a local user to change the persistent IP multipathing (IPMP) configuration.
TI-2026-70046 CVE-2026-102916 · GHSA-rx9m-cwq2-hf3w
Reachable assertion in illumos bhyve lets guest panic host
Priority LOW 29
A reachable assertion in the illumos bhyve instruction emulator allows a guest to panic the host.
TI-2026-12978 CVE-2026-15422 · GHSA-7fj7-gprr-x7fm
SCTP needs to better-check INIT ACK chunk parameters
Priority MEDIUM 49
The illumos SCTP inbound path performs association lookup for INIT ACK chunks without adequately validating the address parameters carried in the chunk.
TI-2026-12996 CVE-2026-15449 · GHSA-5jqp-7hrf-w792
TOCTOU double copyin in illumos dld ioctl handling causes kernel heap corruption
Priority LOW 25
A time-of-check to time-of-use (TOCTOU) flaw in the illumos data-link pseudo-driver (dld) affects handling of the DLDIOC_GETMACPROP and DLDIOC_SETMACPROP ioctls on /dev/dld.
TI-2023-14965 CVE-2023-31284 · GHSA-496c-rr8h-gr3w
illumos illumos-gate before 676abcb has a stack buffer overflow in /dev/net, leading to…
Priority LOW 36
illumos illumos-gate before 676abcb has a stack buffer overflow in /dev/net, leading to privilege escalation via a stat on a long file name in /dev/net.
TI-2021-19340 CVE-2021-43395 · GHSA-6w9w-8g4v-j4m6
An issue was discovered in illumos before f859e71…
Priority MEDIUM 58
An issue was discovered in illumos before f859e7171bb5db34321e45585839c6c3200ebb90, OmniOS Community Edition r151038, OpenIndiana Hipster 2021.04, and SmartOS 20210923.
TI-2019-06998 CVE-2019-9579 · GHSA-79p4-hp34-c4rw
An issue was discovered in Illumos in Nexenta NexentaStor 4.0.5 and 5.1.2, and other…
Priority LOW 38
An issue was discovered in Illumos in Nexenta NexentaStor 4.0.5 and 5.1.2, and other products.
TI-2020-16788 CVE-2020-27678 · GHSA-q226-j4q4-9wc9
An issue was discovered in illumos before 2020-10-22, as used in OmniOS before r151030by…
Priority MEDIUM 45
An issue was discovered in illumos before 2020-10-22, as used in OmniOS before r151030by, r151032ay, and r151034y and SmartOS before 20201022.
TI-2016-05625 CVE-2016-6561 · GHSA-fj5w-h5xf-6hch
illumos smbsrv NULL pointer dereference allows system crash.
Priority LOW 38
illumos smbsrv NULL pointer dereference allows system crash.
TI-2016-05624 CVE-2016-6560 · GHSA-m6wp-2r29-6958
Improper input validation in illumos osnet-incorporation
Priority MEDIUM 41
illumos osnet-incorporation bcopy() and bzero() implementations make signed instead of unsigned comparisons allowing a system crash.
TI-2014-07715 CVE-2014-9491 · GHSA-vr47-prxx-24cf
The devzvol_readdir function in illumos does not check the return value of a strchr call…
Priority LOW 28
The devzvol_readdir function in illumos does not check the return value of a strchr call, which allows remote attackers to cause a denial of service (NULL pointer dereference and panic) via unspecified vectors.
TI-2012-00210 CVE-2012-0217 · GHSA-q644-363q-jfmm
The x86-64 kernel system-call functionality in Xen 4.1.2 and earlier, as used in Citrix…
Priority MEDIUM 59
The x86-64 kernel system-call functionality in Xen 4.1.2 and earlier, as used in Citrix XenServer 6.0.2 and earlier and other products; Oracle Solaris 11 and earlier; illumos before r13724; Joyent SmartOS before 20120614…