CVE-2016-9676 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Citrix Provisioning Services

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer4 documents3 sources
Severity
9.8CRITICALNVD
EPSS
6.2%
top 9.09%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
8
Citrix Provisioning ServicesCitrix ADMCitrix Hypervisor+5 more
Timeline
PublishedJan 18
Latest updateMay 17

Description

Buffer overflow in Citrix Provisioning Services before 7.12 allows attackers to execute arbitrary code via unspecified vectors.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages8 packages

🔴Vulnerability Details

1
GHSA
GHSA-27c7-r685-f6vw: Buffer overflow in Citrix Provisioning Services before 7↗2022-05-17
▶

📋Vendor Advisories

2
Citrix
CVE-2016-9676: Buffer overflow in Citrix Provisioning Services before 7.12 allows attackers to execute arbitrary code via unspecified vectors.↗2017-01-18
▶
Citrix
Citrix Security Bulletin CTX219580↗
▶