NVD

Id
18217  
Name
CVE-2016-1885  
Description
Integer signedness error in the amd64_set_ldt function in sys/amd64/amd64/sys_machdep.c in FreeBSD 9.3 before p39, 10.1 before p31, and 10.2 before p14 allows local users to cause a denial of service (kernel panic) via an i386_set_ldt system call, which triggers a heap-based buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-19  
Published
2016-04-11  
Modified Date
2016-04-22  
Seq
2016-1885  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
100556 18217 CVE-2016-1885 http://packetstormsecurity.com/files/136276/FreeBSD-Kernel-amd64_set_ldt-Heap-Overflow.html  View
100557 18217 CVE-2016-1885 20160316 [CORE-2016-0005] - FreeBSD Kernel amd64_set_ldt Heap Overflow  View
100558 18217 CVE-2016-1885 20160317 Re: [CORE-2016-0005] - FreeBSD Kernel amd64_set_ldt Heap Overflow  View
100559 18217 CVE-2016-1885 http://www.coresecurity.com/advisories/freebsd-kernel-amd64setldt-heap-overflow  View
100560 18217 CVE-2016-1885 20160316 [CORE-2016-0005] - FreeBSD Kernel amd64_set_ldt Heap Overflow  View
100561 18217 CVE-2016-1885 20160316 Re: [FD] [CORE-2016-0005] - FreeBSD Kernel amd64_set_ldt Heap Overflow  View
100562 18217 CVE-2016-1885 1035309  View
100563 18217 CVE-2016-1885 FreeBSD-SA-16:15  View
100564 18217 CVE-2016-1885 39570  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
1529 JVNDB-2016-002302 FreeBSD の sys/amd64/amd64/sys_machdep.c の amd64_set_ldt 関数における整数符号エラーの脆弱性 FreeBSD の sys/amd64/amd64/sys_machdep.c の amd64_set_ldt 関数には、整数符号エラーの脆弱性が存在します。 CVE-2016-1885 88391 CVE-2016-1885 18217 4.9 6.2 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002302.html 2016-03-16 2016-04-27 View