← Vulnerability feed

Vulnerability record · CVE-2016-6560 · published 31 March 2017

CVE-2016-6560: Illumos improper input validation vulnerability

Illumos · Illumos

illumos osnet-incorporation bcopy() and bzero() implementations make signed instead of unsigned comparisons allowing a system crash.

8.6 CVSS 3.0 High EPSS 1.7% · top 23.8% CWE-195 · CWE-195CWE-20 · Improper input validation
8.6CVSS 3.0 base score, v2 7.8
1.7%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
6References
17 Jun 2026Last modified by NVD

Description

illumos osnet-incorporation bcopy() and bzero() implementations make signed instead of unsigned comparisons allowing a system crash.

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/illumos/illumos-gate/commit/5aaab1a49679c26dbcb6fb6dc25799950d70cc71 PatchThird Party Advisory
https://www.illumos.org/issues/7488 PatchVendor Advisory
https://www.openindiana.org/2016/11/01/cve-2016-6560-cve-2016-6561-security-issues-in-illumos/ Third Party Advisory
https://github.com/illumos/illumos-gate/commit/5aaab1a49679c26dbcb6fb6dc25799950d70cc71 PatchThird Party Advisory
https://www.illumos.org/issues/7488 PatchVendor Advisory
https://www.openindiana.org/2016/11/01/cve-2016-6560-cve-2016-6561-security-issues-in-illumos/ Third Party Advisory

Track CVE-2016-6560 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2020-27678Illumos classic buffer overflow vulnerabilityAn issue was discovered in illumos before 2020-10-22, as used in OmniOS before r151030by, r151032ay, and r151034y and SmartOS before 20201022. There …EPSS 1.4%8.1CVE-2019-9579Illumos incorrect default permissions vulnerabilityAn issue was discovered in Illumos in Nexenta NexentaStor 4.0.5 and 5.1.2, and other products. The SMB server allows an attacker to have unintended a…EPSS 0.52%7.5CVE-2016-6561Illumos null pointer dereference vulnerabilityillumos smbsrv NULL pointer dereference allows system crash.EPSS 2.5%7.2CVE-2012-0217Freebsd memory buffer overflow vulnerabilityThe x86-64 kernel system-call functionality in Xen 4.1.2 and earlier, as used in Citrix XenServer 6.0.2 and earlier and other products; Oracle Solari…EPSS 40%5.5CVE-2021-43395Illumos vulnerabilityAn issue was discovered in illumos before f859e7171bb5db34321e45585839c6c3200ebb90, OmniOS Community Edition r151038, OpenIndiana Hipster 2021.04, an…EPSS 0.33%5.0CVE-2014-9491Illumos vulnerabilityThe devzvol_readdir function in illumos does not check the return value of a strchr call, which allows remote attackers to cause a denial of service …EPSS 2.7%

Source: NIST National Vulnerability Database (record CVE-2016-6560), CISA KEV, FIRST EPSS (scores of 2026-10-06). This page is refreshed as NVD updates the record.