Illumos vulnerabilities
We track 2 vulnerabilities in Illumos products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 16, 2026.
2vulnerabilities
1critical
1high
0exploited
8.4average CVSS score
Latest Illumos vulnerabilities
- 9.1 Critical severity
illumos-gate: Heap-based Buffer Overflow
The illumos SCTP inbound path performs association lookup for INIT ACK chunks without adequately validating the address parameters carried in the chunk. Since this lookup runs during packet classification (i.e. before SCTP integrity checks or IPsec policy are
- 7.8 High severity
Illumos-gate: Out-of-bounds Write
illumos illumos-gate before 676abcb has a stack buffer overflow in /dev/net, leading to privilege escalation via a stat on a long file name in /dev/net.