CVE-2017-17482

CWE-119 — Buffer Overflow3 documents3 sources
Severity
7.8HIGH
EPSS
0.4%
top 37.56%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
HP Openvms
Timeline
PublishedFeb 7
Latest updateMay 14

Description

An issue was discovered in OpenVMS through V8.4-2L2 on Alpha and through V8.4-2L1 on IA64, and VAX/VMS 4.0 and later. A malformed DCL command table may result in a buffer overflow allowing a local privilege escalation when a non-privileged account enters a crafted command line. This bug is exploitable on VAX and Alpha and may cause a process crash on IA64. Software was affected regardless of whether it was directly shipped by VMS Software, Inc. (VSI), HPE, HP, Compaq, or Digital Equipment Corpor…

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages1 packages

▶NVDhp/openvms8.4-2l1+1

🔴Vulnerability Details

2
GHSA
GHSA-29q2-69mh-57j9: An issue was discovered in OpenVMS through V8↗2022-05-14
▶
CVEList
CVE-2017-17482: An issue was discovered in OpenVMS through V8↗2018-02-07
▶
CVE-2017-17482 (HIGH CVSS 7.8) | An issue was discovered in OpenVMS | cvebase.io