PT-2017-3744 · Aruba · Arubaos

CVE-2017-9003 · Publicado 2017-10-11 · Atualizado 2025-01-07

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: ArubaOS (affected versions not specified)

Description: The issue is caused by a buffer overflow in memory, potentially allowing a remote attacker to execute arbitrary code or cause a denial of service. Multiple memory corruption flaws are present, which could enable an unauthenticated user to crash ArubaOS processes. With sufficient time and effort, it is possible that these flaws could lead to remote code execution, although this has not been confirmed.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

BDU:2019-00232

CVE-2017-9003

Produtos afetados

Arubaos

Referências · 6

• https://t.me/cvenotify/106544 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2017-9003 · Nota de Segurança
• https://bdu.fstec.ru/vul/2019-00232 · Nota de Segurança
• https://arubanetworks.com/assets/alert/ARUBA-PSA-2017-006.txt · Nota
• http://arubanetworks.com/assets/alert/ARUBA-PSA-2017-006.txt · Aviso do Fabricante
• http://securitytracker.com/id/1039580 · Nota