CVE-2016-1885 in FreeBSD
Summary
Integer signedness error in the amd64_set_ldt function in sys/amd64/amd64/sys_machdep.c in FreeBSD 9.3 before p39, 10.1 before p31, and 10.2 before p14 allows local users to cause a denial of service (kernel panic) via an i386_set_ldt system call, which triggers a heap-based buffer overflow.
Reservation
01/13/2016
Disclosure
04/11/2016
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 81379 | FreeBSD sys_machdep.c sysarch(2) memory corruption | 119 | Proof-of-Concept | Official fix | CVE-2016-1885 |