CVE-2016-6240

High

Published: 07/03/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Integer truncation error in the amap_alloc function in OpenBSD 5.8 and 5.9 allows local users to execute arbitrary code with kernel privileges via a large size value.

Risk Assessment

This vulnerability poses a risk to system integrity as local users can gain unauthorized access to system resources with administrator privileges.

Recommendation

It is recommended to update the system to the latest version of OpenBSD to mitigate this vulnerability and to monitor local user access.

Other vulnerabilities in OpenBSD 5.8, OpenBSD 5.9

CVE-2016-6241High
Integer overflow in the amap_alloc1 function in OpenBSD 5.8 and 5.9 allows local users to execute arbitrary code with kernel privileges via a large size value.

Original NVD description (English source)

Integer truncation error in the amap_alloc function in OpenBSD 5.8 and 5.9 allows local users to execute arbitrary code with kernel privileges via a large size value.