Illumos

10 CVEs across 3 Illumos products. Browse Illumos vulnerabilities, severities, and proof-of-concept exploits.

Illumos products with known CVEs

ProductCVEs
Illumos7
Illumos-Gate3
Osnet-Incorporation2
Illumos CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-154492026-07-16A time-of-check to time-of-use (TOCTOU) flaw in the illumos data-link pseudo-driver (dld) affects handling of the DLDIOC_GETMACPROP and DLDIOC_SETMACPROP ioctl…
CVE-2026-154222026-07-16The illumos SCTP inbound path performs association lookup for INIT ACK chunks without adequately validating the address parameters carried in the chunk. Since…
CVE-2023-31284High7.82023-05-04illumos illumos-gate before 676abcb has a stack buffer overflow in /dev/net, leading to privilege escalation via a stat on a long file name in /dev/net.
CVE-2019-9579High8.12022-12-26An issue was discovered in Illumos in Nexenta NexentaStor 4.0.5 and 5.1.2, and other products. The SMB server allows an attacker to have unintended access, e.g…
CVE-2021-43395Medium5.52022-12-26An issue was discovered in illumos before f859e7171bb5db34321e45585839c6c3200ebb90, OmniOS Community Edition r151038, OpenIndiana Hipster 2021.04, and SmartOS…
CVE-2020-27678Critical9.82020-10-26An issue was discovered in illumos before 2020-10-22, as used in OmniOS before r151030by, r151032ay, and r151034y and SmartOS before 20201022. There is a buffe…
CVE-2016-6561High7.52017-03-31illumos smbsrv NULL pointer dereference allows system crash.
CVE-2016-6560High8.62017-03-31illumos osnet-incorporation bcopy() and bzero() implementations make signed instead of unsigned comparisons allowing a system crash.
CVE-2014-94912015-01-20The devzvol_readdir function in illumos does not check the return value of a strchr call, which allows remote attackers to cause a denial of service (NULL poin…
CVE-2012-02172012-06-12The x86-64 kernel system-call functionality in Xen 4.1.2 and earlier, as used in Citrix XenServer 6.0.2 and earlier and other products; Oracle Solaris 11 and e…