← Vulnerability feed
Start free
Open in platform
Vulnerability record · CVE-2016-6561 · published 31 March 2017
CVE-2016-6561: Illumos null pointer dereference vulnerability
Illumos · Illumos
illumos smbsrv NULL pointer dereference allows system crash.
7.5 CVSS 3.0 High EPSS 2.5% · top 15.6% CWE-476 · NULL pointer dereference
7.5CVSS 3.0 base score, v2 7.8
2.5%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
8References, 2 tagged exploit
17 Jun 2026Last modified by NVD
Description
illumos smbsrv NULL pointer dereference allows system crash.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.
References
| Link | Tags |
|---|---|
| http://www.securityfocus.com/bid/98079 | |
| https://github.com/illumos/illumos-gate/commit/6d1c73b5858fefc6161c7d686345f0dc887ea799 | PatchThird Party Advisory |
| https://www.illumos.org/issues/7483 | ExploitVendor Advisory |
| https://www.openindiana.org/2016/11/01/cve-2016-6560-cve-2016-6561-security-issues-in-illumos/ | Third Party Advisory |
| http://www.securityfocus.com/bid/98079 | |
| https://github.com/illumos/illumos-gate/commit/6d1c73b5858fefc6161c7d686345f0dc887ea799 | PatchThird Party Advisory |
| https://www.illumos.org/issues/7483 | ExploitVendor Advisory |
| https://www.openindiana.org/2016/11/01/cve-2016-6560-cve-2016-6561-security-issues-in-illumos/ | Third Party Advisory |
Track CVE-2016-6561 inside VULONE
Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.
Related vulnerabilities
Same products first, then exploited flaws of the same weakness class.
9.8CVE-2020-27678Illumos classic buffer overflow vulnerabilityAn issue was discovered in illumos before 2020-10-22, as used in OmniOS before r151030by, r151032ay, and r151034y and SmartOS before 20201022. There …EPSS 1.4%8.6CVE-2016-6560Illumos improper input validation vulnerabilityillumos osnet-incorporation bcopy() and bzero() implementations make signed instead of unsigned comparisons allowing a system crash.EPSS 1.7%8.1CVE-2019-9579Illumos incorrect default permissions vulnerabilityAn issue was discovered in Illumos in Nexenta NexentaStor 4.0.5 and 5.1.2, and other products. The SMB server allows an attacker to have unintended a…EPSS 0.52%7.2CVE-2012-0217Freebsd memory buffer overflow vulnerabilityThe x86-64 kernel system-call functionality in Xen 4.1.2 and earlier, as used in Citrix XenServer 6.0.2 and earlier and other products; Oracle Solari…EPSS 40%5.5CVE-2021-43395Illumos vulnerabilityAn issue was discovered in illumos before f859e7171bb5db34321e45585839c6c3200ebb90, OmniOS Community Edition r151038, OpenIndiana Hipster 2021.04, an…EPSS 0.33%5.0CVE-2014-9491Illumos vulnerabilityThe devzvol_readdir function in illumos does not check the return value of a strchr call, which allows remote attackers to cause a denial of service …EPSS 2.7%6.2CVE-2026-21525Windows Remote Access Connection Manager null pointer dereference DoSWindows Remote Access Connection Manager contains a null pointer dereference (CWE-476) that lets an unauthorized attacker deny service locally. The f…KEVEPSS 4.8%analysed
Source: NIST National Vulnerability Database (record CVE-2016-6561), CISA KEV, FIRST EPSS (scores of 2026-10-06). This page is refreshed as NVD updates the record.
