Vulnerabilidades em illumos
10 resultadosAnálise Vexday
O illumos apresenta um panorama de risco moderado com 4 vulnerabilidades conhecidas, sendo 1 crítica (CVSS), porém nenhuma sob exploração ativa documentada. A fraqueza dominante é buffer overflow (CWE-122), e a recente publicação de 2 CVEs nos últimos 90 dias indica descobertas contínuas que demandam monitoramento, embora o risco imediato de ataque seja baixo.
CVE-2016-6561—illumos smbsrv NULL pointer dereference allows system crash.EPSS 2.5%CVE-2016-6560—illumos osnet-incorporation bcopy() and bzero() implementations make signed instead of unsigned comparisons allowing a system crash.EPSS 1.7%CVE-2026-15422CRITICALSCTP needs to better-check INIT ACK chunk parametersEPSS 0.9%CVE-2026-104115MEDIUMStack buffer overflow in illumos reparsed nfs-basic plugin allows local users to crash the daemonEPSS 0.1%CVE-2026-102916MEDIUMReachable assertion in illumos bhyve REP string instruction emulation allows guest to panic hostEPSS 0.1%CVE-2026-104112MEDIUMMissing release of passed file descriptors in illumos nscd allows local users to exhaust kernel memoryEPSS 0.1%CVE-2026-15449MEDIUMTOCTOU double copyin in illumos dld ioctl handling causes kernel heap corruptionEPSS 0.1%CVE-2026-104114MEDIUMNULL pointer dereference in illumos nwamd door handler allows local users to crash the daemonEPSS 0.1%CVE-2026-104116LOWMissing authorization in illumos zonestatd allows local users to disrupt zonestat and enumerate running zonesEPSS 0.1%CVE-2026-104117LOWMissing authorization in illumos ipmgmtd allows local users to change persistent IPMP group membershipEPSS 0.1%