PT-2017-12225 · Actian · Actian Pervasive Psql+1

Published 2017-07-31 · Updated 2019-10-03 · CVE-2017-11757

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Actian Pervasive PSQL version 12.10 Actian Zen version 13

Description The issue is a heap-based buffer overflow that allows remote attackers to execute arbitrary code via crafted traffic to TCP port 1583. This occurs after the Server-Client encryption-key exchange. The problem stems from an integer underflow that results in a zero-byte allocation. The srvLnaConnectMP1 function is affected.

Recommendations For Actian Pervasive PSQL version 12.10, update to a version that fixes the integer underflow issue to prevent the heap-based buffer overflow. For Actian Zen version 13, update to a version that fixes the integer underflow issue to prevent the heap-based buffer overflow. As a temporary workaround, consider restricting access to TCP port 1583 to minimize the risk of exploitation.

Exploit

Fix

Integer Underflow

Weakness Enumeration

CWE-191

Related Identifiers

CVE-2017-11757

Affected Products

Actian Pervasive Psql

Actian Zen

References · 5

• 🔥 https://blogs.securiteam.com/index.php/archives/2924 · Exploit
• http://supportservices.actian.com/support-services/security-center#announcements · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-11757 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-11757 · Security Note
• https://twitter.com/SecuriTeam_SSD/status/815567538318954496 · Note