CVE-2014-2543

Опубликовано: 08 апр. 2014

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Buffer overflow in the Rendezvous Daemon (rvd), Rendezvous Routing Daemon (rvrd), Rendezvous Secure Daemon (rvsd), and Rendezvous Secure Routing Daemon (rvsrd) in TIBCO Rendezvous before 8.4.2, Messaging Appliance before 8.7.1, and Substation ES before 2.8.1 allows remote attackers to execute arbitrary code by leveraging access to a directly connected client and transmitting crafted data.

Ссылки

http://www.securityfocus.com/bid/66744
http://www.securitytracker.com/id/1030070
http://www.tibco.com/mk/advisory.jsp
Vendor Advisory
http://www.tibco.com/multimedia/rendezvous_advisory_20140408_tcm8-20763.txt
Vendor Advisory
http://www.securityfocus.com/bid/66744
http://www.securitytracker.com/id/1030070
http://www.tibco.com/mk/advisory.jsp
Vendor Advisory
http://www.tibco.com/multimedia/rendezvous_advisory_20140408_tcm8-20763.txt
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:tibco:rendezvous:*:*:*:*:*:*:*:*

Версия до 8.4.1 (включая)

cpe:2.3:a:tibco:rendezvous:7.4.11:*:*:*:*:*:*:*

cpe:2.3:a:tibco:rendezvous:7.5.1:*:*:*:*:*:*:*

cpe:2.3:a:tibco:rendezvous:7.5.2:*:*:*:*:*:*:*

cpe:2.3:a:tibco:rendezvous:7.5.3:*:*:*:*:*:*:*

cpe:2.3:a:tibco:rendezvous:7.5.4:*:*:*:*:*:*:*

cpe:2.3:a:tibco:rendezvous:8.2.1:*:*:*:*:*:*:*

cpe:2.3:a:tibco:rendezvous:8.3.0:*:*:*:*:*:*:*

cpe:2.3:a:tibco:rendezvous:8.3.1:*:*:*:*:*:*:*

cpe:2.3:a:tibco:rendezvous:8.10:*:*:*:*:*:*:*

cpe:2.3:a:tibco:substantiation_es:*:*:*:*:*:*:*:*

Версия до 2.8.0 (включая)

cpe:2.3:h:tibco:messaging_appliance:*:*:*:*:*:*:*:*

Версия до 8.7.0 (включая)

EPSS

Процентиль: 89%

0.04297

Низкий

7.5 High

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-q2vf-jgqw-hc46

github

больше 3 лет назад