CVEvulnerability

CVE-2016-6560

8.6 HIGH Published 2017-03-31 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2017-03-31
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.0 ([email protected]): 8.6 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
CVSS 2.0 ([email protected]): 7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C
Weaknesses: CWE-195, CWE-20

Description

illumos osnet-incorporation bcopy() and bzero() implementations make signed instead of unsigned comparisons allowing a system crash.

Affected configurations

• illumos illumos

Related

Weakness · CWE (2)

CWE-195 Signed to Unsigned Conversion Error weakness
CWE-20 Improper Input Validation weakness

References

https://github.com/illumos/illumos-gate/commit/5aaab1a49679c26dbcb6fb6dc25799950d70cc71 Patch, Third Party Advisory
https://www.illumos.org/issues/7488 Patch, Vendor Advisory
https://www.openindiana.org/2016/11/01/cve-2016-6560-cve-2016-6561-security-issues-in-illumos/ Third Party Advisory
https://github.com/illumos/illumos-gate/commit/5aaab1a49679c26dbcb6fb6dc25799950d70cc71 Patch, Third Party Advisory
https://www.illumos.org/issues/7488 Patch, Vendor Advisory
https://www.openindiana.org/2016/11/01/cve-2016-6560-cve-2016-6561-security-issues-in-illumos/ Third Party Advisory