Priority LOW 23
A stack-based buffer overflow in the illumos reparse point daemon (reparsed) allows a local user to crash the daemon.
Vulnerabilities
9 records
Priority LOW 23
A NULL pointer dereference in the illumos Network Auto-Magic daemon (nwamd) allows a local user to crash the daemon.
Priority LOW 29
A missing release of resources in the illumos name service cache daemon (nscd) allows a local user to exhaust kernel memory.
Priority LOW 9
A missing authorization check in the illumos zones statistics daemon (zonestatd) allows a local user in any zone to disrupt zonestat in other zones and to determine which zones are running.
Priority LOW 23
A double free in the IP management daemon (ipmgmtd) of OmniOS and SmartOS allows a local user to crash the daemon.
Priority LOW 9
A missing authorization check in the illumos IP management daemon (ipmgmtd) allows a local user to change the persistent IP multipathing (IPMP) configuration.
TI-2026-70046 CVE-2026-102916 · GHSA-rx9m-cwq2-hf3w
Reachable assertion in illumos bhyve lets guest panic host
Priority LOW 29
A reachable assertion in the illumos bhyve instruction emulator allows a guest to panic the host.
TI-2026-12978 CVE-2026-15422 · GHSA-7fj7-gprr-x7fm
SCTP needs to better-check INIT ACK chunk parameters
Priority MEDIUM 49
The illumos SCTP inbound path performs association lookup for INIT ACK chunks without adequately validating the address parameters carried in the chunk.
TI-2026-12996 CVE-2026-15449 · GHSA-5jqp-7hrf-w792
TOCTOU double copyin in illumos dld ioctl handling causes kernel heap corruption
Priority LOW 25
A time-of-check to time-of-use (TOCTOU) flaw in the illumos data-link pseudo-driver (dld) affects handling of the DLDIOC_GETMACPROP and DLDIOC_SETMACPROP ioctls on /dev/dld.