{
    "id": "CVE-2016-1885",
    "published": "2016-04-12 02:00:06",
    "last_modified": "2026-06-17 00:42:47",
    "cvss_score": "6.2",
    "cvss_severity": "MEDIUM",
    "cvss_version": "3.0",
    "cvss_vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
    "cwe": "CWE-119",
    "description": "Integer signedness error in the amd64_set_ldt function in sys/amd64/amd64/sys_machdep.c in FreeBSD 9.3 before p39, 10.1 before p31, and 10.2 before p14 allows local users to cause a denial of service (kernel panic) via an i386_set_ldt system call, which triggers a heap-based buffer overflow.",
    "epss_score": "0.01263",
    "epss_percentile": "0.68867",
    "kev": 0,
    "kev_due": null,
    "has_exploit": 1,
    "updated_at": "2026-10-10 18:17:14",
    "priority": {
        "rank": 2,
        "label": "Patch early",
        "why": "A public exploit exists."
    },
    "products": [
        {
            "vendor": "freebsd",
            "product": "freebsd"
        }
    ],
    "kev_detail": null,
    "exploits": [
        {
            "source": "exploit-db",
            "ref_id": "39570",
            "title": "FreeBSD 10.2 (x64) - 'amd64_set_ldt' Heap Overflow",
            "date": "2016-03-16",
            "url": "https://www.exploit-db.com/exploits/39570"
        }
    ],
    "refs_list": [
        "http://packetstormsecurity.com/files/136276/FreeBSD-Kernel-amd64_set_ldt-Heap-Overflow.html",
        "http://seclists.org/fulldisclosure/2016/Mar/56",
        "http://seclists.org/fulldisclosure/2016/Mar/67",
        "http://www.coresecurity.com/advisories/freebsd-kernel-amd64setldt-heap-overflow",
        "http://www.securityfocus.com/archive/1/537812/100/0/threaded",
        "http://www.securityfocus.com/archive/1/537813/100/0/threaded",
        "http://www.securitytracker.com/id/1035309",
        "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:15.sysarch.asc",
        "https://www.exploit-db.com/exploits/39570/",
        "http://packetstormsecurity.com/files/136276/FreeBSD-Kernel-amd64_set_ldt-Heap-Overflow.html",
        "http://seclists.org/fulldisclosure/2016/Mar/56",
        "http://seclists.org/fulldisclosure/2016/Mar/67",
        "http://www.coresecurity.com/advisories/freebsd-kernel-amd64setldt-heap-overflow",
        "http://www.securityfocus.com/archive/1/537812/100/0/threaded",
        "http://www.securityfocus.com/archive/1/537813/100/0/threaded",
        "http://www.securitytracker.com/id/1035309",
        "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:15.sysarch.asc",
        "https://www.exploit-db.com/exploits/39570/"
    ]
}