GCVE - cpe:2.3:a:illumos:illumos:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:illumos:illumos:-:*:*:*:*:*:*:*

part: a version: - update: *

Vendor	Illumos (`1691eef7-f0b3-5eba-a3ac-e8acf8e3fc51`)
Product	Illumos (`d10085cd-1acb-5f75-999a-b3cf638d2b6b`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/illumos/illumos-gate`	purl2cpe	2026-06-01 10:15:49.856450

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2019-9579`	vulnerable	2026-06-08 05:14:25.747030	Details available An issue was discovered in Illumos in Nexenta NexentaStor 4.0.5 and 5.1.2, and other products. The SMB server allows an attacker to have unintended access, e.g., an attacker with WRITE_XATTR can change permissions. This occurs because of a combination of three factors: ZFS extended attributes are used to implement NT named streams, the SMB protocol requires implementations to have open handle semantics similar to those of NTFS, and the SMB server passes along certain attribute requests to the underlying object (i.e., they are not considered to be requests that pertain to the named stream). Published: 2022-12-26T00:00:00.000Z Updated: 2025-04-14T16:23:45.512Z Open on db.gcve.eu Reference links https://www.illumos.org/issues/10506 https://www.oracle.com/security-alerts/cpuapr2020.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-6561`	vulnerable	2026-06-08 05:08:02.771290	Details available illumos smbsrv NULL pointer dereference allows system crash. Published: 2017-03-31T19:00:00.000Z Updated: 2024-08-06T01:36:28.435Z Open on db.gcve.eu Reference links https://www.illumos.org/issues/7483 https://www.openindiana.org/2016/11/01/cve-2016-6560-cve-2016-6561-security-issues-in-illumos/ https://github.com/illumos/illumos-gate/commit/6d1c73b5858fefc6161c7d686345f0dc887ea799 http://www.securityfocus.com/bid/98079	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-6560`	vulnerable	2026-06-08 05:08:02.770852	Details available illumos osnet-incorporation bcopy() and bzero() implementations make signed instead of unsigned comparisons allowing a system crash. Published: 2017-03-31T19:00:00.000Z Updated: 2024-08-06T01:36:28.157Z Open on db.gcve.eu Reference links https://www.illumos.org/issues/7488 https://github.com/illumos/illumos-gate/commit/5aaab1a49679c26dbcb6fb6dc25799950d70cc71 https://www.openindiana.org/2016/11/01/cve-2016-6560-cve-2016-6561-security-issues-in-illumos/	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.