CVE-2016-3628 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Enterprise Message Service

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer3 documents3 sources
Severity
8.8HIGHNVD
EPSS
2.9%
top 13.73%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Tibco Enterprise Message ServiceTibco Enterprise Message Service Appliance Firmware
Timeline
PublishedApr 20
Latest updateMay 17

Description

Buffer overflow in tibemsd in the server in TIBCO Enterprise Message Service (EMS) before 8.3.0 and EMS Appliance before 2.4.0 allows remote authenticated users to cause a denial of service or possibly execute arbitrary code via crafted inbound data.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-p8rh-j2f6-9wmr: Buffer overflow in tibemsd in the server in TIBCO Enterprise Message Service (EMS) before 8↗2022-05-17
▶
CVEList
CVE-2016-3628: Buffer overflow in tibemsd in the server in TIBCO Enterprise Message Service (EMS) before 8↗2016-04-20
▶
CVE-2016-3628 — HIGH severity | cvebase