Описание
Heap-based buffer overflow in Cisco Unified Computing System (UCS) Platform Emulator 2.5(2)TS4, 3.0(2c)A, and 3.0(2c)TS9 allows local users to gain privileges via crafted libclimeta.so filename arguments, aka Bug ID CSCux68837.
Ссылки
- Vendor Advisory
- Third Party Advisory
- Vendor Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:cisco:unified_computing_system_platform_emulator:2.5\(2\)ts4:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_computing_system_platform_emulator:3.0\(2c\)a:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_computing_system_platform_emulator:3.0\(2c\)ts9:*:*:*:*:*:*:*
EPSS
Процентиль: 25%
0.00086
Низкий
8.4 High
CVSS3
7.2 High
CVSS2
Дефекты
CWE-119
Связанные уязвимости
CVSS3: 8.4
github
больше 3 лет назад
Heap-based buffer overflow in Cisco Unified Computing System (UCS) Platform Emulator 2.5(2)TS4, 3.0(2c)A, and 3.0(2c)TS9 allows local users to gain privileges via crafted libclimeta.so filename arguments, aka Bug ID CSCux68837.
EPSS
Процентиль: 25%
0.00086
Низкий
8.4 High
CVSS3
7.2 High
CVSS2
Дефекты
CWE-119