CVE-2016-0216
published 2016-02-29CVE-2016-0216: Stack-based buffer overflow in IBM Tivoli Storage Manager FastBack 5.5 and 6.1.x through 6.1.11.1 allows remote attackers to cause a denial of service (daemon…
PriorityP345critical9.8CVSS 3.0
AVNACLPRNUINSUCHIHAH
EPSS
2.40%
82.1th percentile
Stack-based buffer overflow in IBM Tivoli Storage Manager FastBack 5.5 and 6.1.x through 6.1.11.1 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors, a different vulnerability than CVE-2016-0212 and CVE-2016-0213.
Affected
35 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | tivoli_storage_manager_fastback | — | — |
| ibm | tivoli_storage_manager_fastback | — | — |
| ibm | tivoli_storage_manager_fastback | — | — |
| ibm | tivoli_storage_manager_fastback | — | — |
| ibm | tivoli_storage_manager_fastback | — | — |
| ibm | tivoli_storage_manager_fastback | — | — |
| ibm | tivoli_storage_manager_fastback | — | — |
| ibm | tivoli_storage_manager_fastback | — | — |
| ibm | tivoli_storage_manager_fastback | — | — |
| ibm | tivoli_storage_manager_fastback | — | — |
| ibm | tivoli_storage_manager_fastback | — | — |
| ibm | tivoli_storage_manager_fastback | — | — |
| ibm | tivoli_storage_manager_fastback | — | — |
| ibm | tivoli_storage_manager_fastback | — | — |
| ibm | tivoli_storage_manager_fastback | — | — |
| ibm | tivoli_storage_manager_fastback | — | — |
| ibm | tivoli_storage_manager_fastback | — | — |
| ibm | tivoli_storage_manager_fastback | — | — |
| ibm | tivoli_storage_manager_fastback | — | — |
| ibm | tivoli_storage_manager_fastback | — | — |
| ibm | tivoli_storage_manager_fastback | — | — |
| ibm | tivoli_storage_manager_fastback | — | — |
| ibm | tivoli_storage_manager_fastback | — | — |
| ibm | tivoli_storage_manager_fastback | — | — |
| ibm | tivoli_storage_manager_fastback | — | — |
CVSS provenance
nvdv3.09.8CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-j8x8-x8mc-8gmj: Stack-based buffer overflow in IBM Tivoli Storage Manager FastBack 5
ghsa_unreviewed·2022-05-17·CVSS 9.8
CVE-2016-0213 [CRITICAL] CWE-119 GHSA-j8x8-x8mc-8gmj: Stack-based buffer overflow in IBM Tivoli Storage Manager FastBack 5
Stack-based buffer overflow in IBM Tivoli Storage Manager FastBack 5.5 and 6.1.x through 6.1.11.1 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors, a different vulnerability than CVE-2016-0212 and CVE-2016-0216.
GHSA
GHSA-w42j-j9g9-cprm: Stack-based buffer overflow in IBM Tivoli Storage Manager FastBack 5
ghsa_unreviewed·2022-05-17·CVSS 9.8
CVE-2016-0212 [CRITICAL] CWE-119 GHSA-w42j-j9g9-cprm: Stack-based buffer overflow in IBM Tivoli Storage Manager FastBack 5
Stack-based buffer overflow in IBM Tivoli Storage Manager FastBack 5.5 and 6.1.x through 6.1.11.1 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors, a different vulnerability than CVE-2016-0213 and CVE-2016-0216.
GHSA
GHSA-jxmv-8fwr-5mqh: Stack-based buffer overflow in IBM Tivoli Storage Manager FastBack 5
ghsa_unreviewed·2022-05-17·CVSS 9.8
CVE-2016-0216 [CRITICAL] CWE-119 GHSA-jxmv-8fwr-5mqh: Stack-based buffer overflow in IBM Tivoli Storage Manager FastBack 5
Stack-based buffer overflow in IBM Tivoli Storage Manager FastBack 5.5 and 6.1.x through 6.1.11.1 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors, a different vulnerability than CVE-2016-0212 and CVE-2016-0213.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2016-8707 ImageMagick: OOB write in convert utility when deflating TIFF files
bugzilla·2016-12-23·CVSS 7.8
CVE-2016-8707 [HIGH] CVE-2016-8707 ImageMagick: OOB write in convert utility when deflating TIFF files
CVE-2016-8707 ImageMagick: OOB write in convert utility when deflating TIFF files
An Out-of-bounds write flaw was found in the convert utility of ImageMagick, which is triggered by deflating of compressed TIFF images.
More details available at:
http://www.talosintelligence.com/reports/TALOS-2016-0216/
Discussion:
Upstream patch:
https://github.com/ImageMagick/ImageMagick/commit/e5fd9ab1b70b2edd06de8efb606e04482cb9a2f0
---
Created ImageMagick tracking bugs for this issue:
Affects: fedora-all [bug 1408404]
Talos
Vulnerability Spotlight: ImageMagick Convert Tiff Out of Bounds Write
blogs_talos·2016-12-06·CVSS 7.8
CVE-2016-8707 [HIGH] Vulnerability Spotlight: ImageMagick Convert Tiff Out of Bounds Write
## Vulnerability Spotlight: ImageMagick Convert Tiff Out of Bounds Write
Vulnerability discovered by Tyler Bohan
## Overview Talos is disclosing TALOS-2016-0216 / CVE-2016-8707, an out of bounds write vulnerability in ImageMagick. ImageMagick is a photo editing software program that allows users to edit and manipulate various types of image files. This particular vulnerability lies in the convert utility that is bundled as part of ImageMagick. The utility is used to parse and convert images and other formats interchangeably. The vulnerability occurs when attempting to deflate an Adobe Deflate compressed Tiff image. The buffer that is created to hold decompressed data associated with the Tiff image is not large enough to hold the decompressed stream. This results in a controlled out of bo
Talos
Vulnerability Spotlight: ImageMagick Convert Tiff Out of Bounds Write
blogs_talos·2016-12-06·CVSS 7.8
CVE-2016-8707 [HIGH] Vulnerability Spotlight: ImageMagick Convert Tiff Out of Bounds Write
Vulnerability discovered by Tyler Bohan
## Overview Talos is disclosingTALOS-2016-0216/ CVE-2016-8707, an out of bounds write vulnerability in ImageMagick. ImageMagick is a photo editing software program that allows users to edit and manipulate various types of image files. This particular vulnerability lies in the convert utility that is bundled as part of ImageMagick. The utility is used to parse and convert images and other formats interchangeably. The vulnerability occurs when attempting to deflate an Adobe Deflate compressed Tiff image. The buffer that is created to hold decompressed data associated with the Tiff image is not large enough to hold the decompressed stream. This results in a controlled out of bounds write that under proper circumstances could be exploited into full remo
http://www.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_multiple_security_vulnerabilities_in_ibm_tivoli_storage_manager_fastback_cve_2016_0212_cve_2016_0213_cve_2016_0216http://www.ibm.com/support/docview.wss?uid=swg21975358http://www.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_multiple_security_vulnerabilities_in_ibm_tivoli_storage_manager_fastback_cve_2016_0212_cve_2016_0213_cve_2016_0216http://www.ibm.com/support/docview.wss?uid=swg21975358
2016-02-29
Published