CVE-2017-8022 An issue was discovered in EMC NetWorker (prior to 8.2.4.9, all supported 9.0.x versions, prior to 9.1.1.3, prior to 9.2.0.4). The Server service (nsrd) is affected by a buffer overflow vulnerability....
HighCVSS 8.1
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in EMC NetWorker (prior to 8.2.4.9, all supported 9.0.x versions, prior to 9.1.1.3, prior to 9.2.0.4). The Server service (nsrd) is affected by a buffer overflow vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to execute arbitrary code on vulnerable installations of the software, or cause a denial of service, depending on the target system's platform.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| emc networker | <= 8.2.4.8 | No fix listed |
| emc networker | = 9.0.0.3 | No fix listed |
| emc networker | = 9.0.0.4 | No fix listed |
| emc networker | = 9.0.0.5 | No fix listed |
| emc networker | = 9.0.0.6 | No fix listed |
| emc networker | = 9.0.0.7 | No fix listed |
| emc networker | = 9.0.0.8 | No fix listed |
| emc networker | = 9.0.1.1 | No fix listed |
| emc networker | = 9.0.1.2 | No fix listed |
| emc networker | = 9.0.1.3 | No fix listed |
| emc networker | = 9.0.1.4 | No fix listed |
| emc networker | = 9.0.1.5 | No fix listed |
| emc networker | = 9.0.1.6 | No fix listed |
| emc networker | = 9.0.1.7 | No fix listed |
| emc networker | = 9.0.1.8 | No fix listed |
| emc networker | = 9.0.1.9 | No fix listed |
| emc networker | = 9.1.0.3 | No fix listed |
| emc networker | = 9.1.0.4 | No fix listed |
| emc networker | = 9.1.0.5 | No fix listed |
| emc networker | = 9.1.0.6 | No fix listed |
| emc networker | = 9.1.1.1 | No fix listed |
| emc networker | = 9.1.1.2 | No fix listed |
| emc networker | = 9.2.0.1 | No fix listed |
| emc networker | = 9.2.0.2 | No fix listed |
| emc networker | = 9.2.0.3 | No fix listed |
References
- seclists.org mailing-list third-party-advisory
- 1039583 third-party-advisory vdb-entry