Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Integer signedness error in the ip_set_srcfilter function in the IP Multicast Filter in uts/common/inet/ip/ip_multi.c in the kernel in Sun Solaris 10 and OpenSolaris before snv_92 allows local users to execute arbitrary code in other Solaris Zones via an SIOCSIPMSFILTER IOCTL request with a large value of the imsf->imsf_numsrc field, which triggers an out-of-bounds write of kernel memory. NOTE: this was reported as an integer overflow, but the root cause involves the bypass of a signed comparison.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Sun Solaris SIOCSIPMSFILTER IOCTL请求整数溢出漏洞
Vulnerability Description
Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 Solaris的内核没有正确的处理SIOCSIPMSFILTER IOCTL请求，本地攻击者可以利用这个漏洞以内核级权限执行任意指令。 以下是inet/ip/ip_multi.c中的漏洞代码： static int ip_set_srcfilter(conn_t *connp, struct group_filter *gf, struct ip_msfilter *imsf, ipaddr_t grp, ipif_t *ipif, bo
CVSS Information
N/A
Vulnerability Type
N/A