CVE-2016-9679 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Citrix Provisioning Services

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer5 documents4 sources
Severity
9.8CRITICALNVD
EPSS
3.8%
top 11.93%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
8
Citrix Provisioning ServicesCitrix ADMCitrix Hypervisor+5 more
Timeline
PublishedJan 18
Latest updateMay 17

Description

Citrix Provisioning Services before 7.12 allows attackers to execute arbitrary code by overwriting a function pointer.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages8 packages

🔴Vulnerability Details

1
GHSA
GHSA-vj86-9q4g-rcw8: Citrix Provisioning Services before 7↗2022-05-17
▶

📋Vendor Advisories

2
Citrix
CVE-2016-9679: Citrix Provisioning Services before 7.12 allows attackers to execute arbitrary code by overwriting a function pointer.↗2017-01-18
▶
Citrix
Citrix Security Bulletin CTX219580↗
▶

📄Research Papers

1
arXiv
On the Effectiveness of Type-based Control Flow Integrity↗2020-02-14
▶