Skip to content

CVE-2017-8895 In Veritas Backup Exec 2014 before build 14.1.1187.1126, 15 before build 14.2.1180.3160, and 16 before FP1, there is a use-after-free vulnerability in multiple agents that can lead to a denial of serv...

CriticalCVSS 9.8 EPSS 71.0% Framework module Public exploit
Published
Updated
Exploit status
Public exploit available
Sign in for asset impact Search another CVE

Description

In Veritas Backup Exec 2014 before build 14.1.1187.1126, 15 before build 14.2.1180.3160, and 16 before FP1, there is a use-after-free vulnerability in multiple agents that can lead to a denial of service or remote code execution. An unauthenticated attacker can use this vulnerability to crash the agent or potentially take control of the agent process and then the system it is running on.

Affected products

ProductAffected versionsFixed in
veritas backup exec < 14.1.1786.1126 14.1.1786.1126
veritas backup exec < 14.2.1180.3160 14.2.1180.3160
veritas backup exec < 16.0.1142.1327 16.0.1142.1327

References

  • 98386 third-party-advisory vdb-entry
  • 1038561 third-party-advisory vdb-entry
  • 42282 exploit third-party-advisory vdb-entry
  • www.veritas.com patch vendor-advisory