CVE-2017-17088 The Enterprise version of SyncBreeze 10.2.12 and earlier is affected by a Remote Denial of Service vulnerability. The web server does not check bounds when reading server requests in the Host header o...
HighCVSS 7.5
EPSS 7.0%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
The Enterprise version of SyncBreeze 10.2.12 and earlier is affected by a Remote Denial of Service vulnerability. The web server does not check bounds when reading server requests in the Host header on making a connection, resulting in a classic Buffer Overflow that causes a Denial of Service.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| flexense syncbreeze | <= 10.2.12 | No fix listed |
References
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- 20171215 SyncBreeze <= 10.2.12 - Denial of Service exploit mailing-list third-party-advisory
- 43344 exploit third-party-advisory vdb-entry