CVE-2016-9034: An exploitable buffer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system.

Security readout for executives and security teams

CVE-2016-9034 is a high-severity local privilege-escalation risk in Joyent SmartOS build 20161110T013148Z. A low-privileged local attacker could trigger a buffer overflow in the Hyprlofs filesystem path and potentially gain elevated control. The sources do not show active exploitation or a named patch. Exposure appears limited to Joyent SmartOS OS 20161110T013148Z systems using the vulnerable Hyprlofs filesystem behavior, especially where low-privileged local users or workloads can reach the affected ioctl path. Treat as important for legacy SmartOS environments with local multi-user or multi-tenant exposure. It is not internet-remote based on the supplied CVSS vector, but successful exploitation could compromise host security. Mitigation focus: Inventory SmartOS hosts for OS build 20161110T013148Z.; Check Joyent or SmartOS guidance for fixed builds or workarounds.; Reduce low-privileged local access on affected systems until remediated..

Prepared

May 24, 2026, 11:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.