This vulnerability allows local attackers to escalate privileges on vulnerable installations of Joyent SmartOS release-20170803-20170803T06…

Published 8 y ago 2018-03-19 · modified 4 mo ago 2026-06-17 · JSON

CVSS

7.0

v3.1 · NVD

CISA KEV

not known exploited

EPSS

0.4%

percentile 39%

Public exploits

none known

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Joyent SmartOS release-20170803-20170803T064301Z. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the DTrace DOF files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated object. An attacker can leverage this vulnerability to execute code under the context of the host OS. Was ZDI-CAN-5106.

Exploit prediction (EPSS)

0.44% probability of exploitation in the next 30 days, higher than 39% of all scored CVEs.

CVSS scores

Assigned by	Version	Score	Vector
NVD	3.1	7.0	`CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H`
NVD	2.0	6.9	`AV:L/AC:M/Au:N/C:C/I:C/A:C`

Affected products

Joyent Joyent SmartOS

Classification

Weakness

CWE-787 Out-of-bounds Write

References

help.joyent.com /hc/en-us/articles/360000608188 · x_refsource_CONFIRM, x_transferred
oracle.com /technetwork/security-advisory/cpujul2018-4258247.html · x_refsource_CONFIRM, x_transferred
securitytracker.com /id/1041303 · vdb-entry, x_refsource_SECTRACK, x_transferred
securityfocus.com /bid/104799 · vdb-entry, x_refsource_BID, x_transferred
zerodayinitiative.com /advisories/ZDI-18-236 · x_refsource_MISC, x_transferred

Sources

CVE List: CVE-2018-1171
NVD: CVE-2018-1171

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.