CVE-2007-1189: Bell Labs Plan 9

High severity, CVSS 7.2. EPSS: 0.8% chance of exploitation in the next 30 days.

Integer overflow in the envwrite function in the Alcatel-Lucent Bell Labs Plan 9 kernel allows local users to overwrite certain memory addresses with kernel memory via a large n argument, as demonstrated by (1) modifying the iseve function to gain privileges and (2) making the devpermcheck function grant unrestricted device permissions.

Affected products

• Bell Labs Plan 9: any version

Published 2007-03-02. Last modified 2026-06-16.