Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2016-1887
Description:Integer signedness error in the sockargs function in sys/kern/uipc_syscalls.c in FreeBSD 10.1 before p34, 10.2 before p17, and 10.3 before p3 allows local users to cause a denial of service (memory overwrite and kernel panic) or gain privileges via a negative buflen argument, which triggers a heap-based buffer overflow.
Test IDs: 1.3.6.1.4.1.25623.1.0.106950  
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2016-1887
FreeBSD Security Advisory: FreeBSD-SA-16:19
https://security.FreeBSD.org/advisories/FreeBSD-SA-16:19.sendmsg.asc
http://cturt.github.io/sendmsg.html
http://www.securitytracker.com/id/1035906




© 1998-2025 E-Soft Inc. All rights reserved.