CVE-2017-3195

Description

Commvault Edge Communication Service (cvd) prior to version 11 SP7 or version 11 SP6 with hotfix 590 is prone to a stack-based buffer overflow vulnerability that could lead to arbitrary code execution with administrative privileges.

Weakness classification

• CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CWE-121: Stack-based Buffer Overflow

Primary references

• cret@cert.org — Patch, Vendor Advisory
• cret@cert.org — Third Party Advisory
• cret@cert.org — Third Party Advisory, VDB Entry
• cret@cert.org — Exploit, Third Party Advisory, VDB Entry
• cret@cert.org — Third Party Advisory, US Government Resource
• af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory, VDB Entry
• af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource