PT-2016-5626 · Tibco · Tibco Ems Appliance+1

Published 2016-04-20 · Updated 2016-05-18 · CVE-2016-3628

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TIBCO Enterprise Message Service (EMS) versions prior to 8.3.0 TIBCO EMS Appliance versions prior to 2.4.0

Description A buffer overflow issue exists in the tibemsd server component, allowing remote authenticated users to potentially cause a denial of service or execute arbitrary code by sending crafted inbound data.

Recommendations For TIBCO Enterprise Message Service (EMS) versions prior to 8.3.0, update to version 8.3.0 or later. For TIBCO EMS Appliance versions prior to 2.4.0, update to version 2.4.0 or later.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2016-3628

Affected Products

Tibco Ems Appliance

Tibco Enterprise Message Service

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2016-3628 · Security Note
• http://tibco.com/mk/advisory.jsp · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-3628 · Vendor Advisory
• http://tibco.com/assets/blt8a2d9978616c21fe/2016-001-advisory.txt · Vendor Advisory