CVE-2014-2543: Buffer Overflow
First published: Tue Apr 08 2014(Updated: )
Buffer overflow in the Rendezvous Daemon (rvd), Rendezvous Routing Daemon (rvrd), Rendezvous Secure Daemon (rvsd), and Rendezvous Secure Routing Daemon (rvsrd) in TIBCO Rendezvous before 8.4.2, Messaging Appliance before 8.7.1, and Substation ES before 2.8.1 allows remote attackers to execute arbitrary code by leveraging access to a directly connected client and transmitting crafted data.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| TIBCO Rendezvous | <=8.4.1 | |
| TIBCO Rendezvous | =7.4.11 | |
| TIBCO Rendezvous | =7.5.1 | |
| TIBCO Rendezvous | =7.5.2 | |
| TIBCO Rendezvous | =7.5.3 | |
| TIBCO Rendezvous | =7.5.4 | |
| TIBCO Rendezvous | =8.2.1 | |
| TIBCO Rendezvous | =8.3.0 | |
| TIBCO Rendezvous | =8.3.1 | |
| TIBCO Rendezvous | =8.10 | |
| TIBCO Substation ES | <=2.8.0 | |
| Tibco Messaging Appliance | <=8.7.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2014-2543?
CVE-2014-2543 is classified as a critical vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2014-2543?
To fix CVE-2014-2543, update TIBCO Rendezvous to version 8.4.2 or later, Messaging Appliance to version 8.7.1 or later, and Substation ES to version 2.8.1 or later.
What systems are affected by CVE-2014-2543?
CVE-2014-2543 affects multiple versions of TIBCO Rendezvous, Messaging Appliance, and Substation ES prior to their respective patched versions.
What are the risks associated with CVE-2014-2543?
The risks include unauthorized remote execution of arbitrary code, potentially allowing attackers to compromise the affected systems.
Is CVE-2014-2543 a common vulnerability?
CVE-2014-2543 is considered a significant vulnerability due to its wide scope of impact on critical messaging and routing components.
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/author
- agent/last-modified-date
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/tibco
- canonical/tibco rendezvous
- version/tibco rendezvous/8.4.1
- version/tibco rendezvous/7.4.11
- version/tibco rendezvous/7.5.1
- version/tibco rendezvous/7.5.2
- version/tibco rendezvous/7.5.3
- version/tibco rendezvous/7.5.4
- version/tibco rendezvous/8.2.1
- version/tibco rendezvous/8.3.0
- version/tibco rendezvous/8.3.1
- version/tibco rendezvous/8.10
- canonical/tibco substation es
- version/tibco substation es/2.8.0
- canonical/tibco messaging appliance
- version/tibco messaging appliance/8.7.0