IL
Vendor
illumos
16
CVEs
0
On KEV
6
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-104115 | IL illumos-gate illumos | 5.4 | Oct 9 | Stack buffer overflow in illumos reparsed nfs-basic plugin allows local users to crash the daemon |
| CVE-2026-104114 | IL illumos-gate illumos | 5.4 | Oct 9 | NULL pointer dereference in illumos nwamd door handler allows local users to crash the daemon |
| CVE-2026-104112 | IL illumos-gate illumos | 6.8 | Oct 9 | Missing release of passed file descriptors in illumos nscd allows local users to exhaust kernel memory |
| CVE-2026-104116 | IL illumos-gate illumos | 1.9 | Oct 9 | Missing authorization in illumos zonestatd allows local users to disrupt zonestat and enumerate running zones |
| CVE-2026-104117 | IL illumos-gate illumos | 1.9 | Oct 9 | Missing authorization in illumos ipmgmtd allows local users to change persistent IPMP group membership |
| CVE-2026-102916 | IL illumos-gate illumos | 6.8 | Oct 9 | Reachable assertion in illumos bhyve REP string instruction emulation allows guest to panic host |
| CVE-2026-15422 | IL illumos-gate illumos | 9.1 | Jul 16 | SCTP needs to better-check INIT ACK chunk parameters |
| CVE-2026-15449 | IL illumos-gate illumos | 5.8 | Jul 16 | TOCTOU double copyin in illumos dld ioctl handling causes kernel heap corruption |
| CVE-2023-31284 | IL Illumos-gate Illumos | 7.8 | May 4 | illumos illumos-gate before 676abcb has a stack buffer overflow in /dev/net, leading to privilege escalation via a stat on a long file name in /dev/net |
| CVE-2019-9579 | IL Illumos Illumos | 8.1 | Dec 26 | An issue was discovered in Illumos in Nexenta NexentaStor 4.0.5 and 5.1.2, and other products |
| CVE-2021-43395 | IL Illumos Illumos | 5.5 | Dec 26 | An issue was discovered in illumos before f859e7171bb5db34321e45585839c6c3200ebb90, OmniOS Community Edition r151038, OpenIndiana Hipster 2021.04, and SmartOS 20210923 |
| CVE-2020-27678 | IL Illumos Illumos | 9.8 | Oct 26 | An issue was discovered in illumos before 2020-10-22, as used in OmniOS before r151030by, r151032ay, and r151034y and SmartOS before 20201022 |
| CVE-2016-6561 | IL Illumos Illumos | 7.5 | Mar 31 | illumos smbsrv NULL pointer dereference allows system crash |
| CVE-2016-6560 | IL Illumos Illumos | 8.6 | Mar 31 | illumos osnet-incorporation bcopy() and bzero() implementations make signed instead of unsigned comparisons allowing a system crash |
| CVE-2014-9491 | IL Illumos Illumos | – | Jan 20 | The devzvol_readdir function in illumos does not check the return value of a strchr call, which allows remote attackers to cause a denial of service (NULL pointer dereference and… |
| CVE-2012-0217 | IL Illumos Illumos | – | Jun 12 | The x86-64 kernel system-call functionality in Xen 4.1.2 and earlier, as used in Citrix XenServer 6.0.2 and earlier and other products; Oracle Solaris 11 and earlier; illumos… |