CVE-2007-5242 Unspecified vulnerability in (1) SYS$EI1000.EXE and (2) SYS$EI1000_MON.EXE in HP OpenVMS 8.3 and earlier allows remote attackers to cause a denial of service (machine crash) via an "oversize" packet,....
MediumCVSS 4.3
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in (1) SYS$EI1000.EXE and (2) SYS$EI1000_MON.EXE in HP OpenVMS 8.3 and earlier allows remote attackers to cause a denial of service (machine crash) via an "oversize" packet, which is not properly discarded if "the device has no remaining buffers after receipt of the first buffer segment."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc openvms | <= 8.3 | No fix listed |
References
- [openvms-alerts] 20071003 VMS83A_LAN-V0200, ECO Kit Release mailing-list patch
- [openvms-alerts] 20071003 VMS83I_LAN-V0600, ECO Kit Release mailing-list patch
- 37812 vdb-entry
- 37813 vdb-entry
- 27084 patch third-party-advisory vendor-advisory
- 25939 patch vdb-entry
- ADV-2007-3382 vdb-entry