CVE-2017-14328: Buffer Overflow
Published Oct 23, 2017
·Updated
Extreme EXOS 15.7, 16.x, 21.x, and 22.x allows remote attackers to trigger a buffer overflow leading to a reboot.
Affected Software
76 affected components
Extremenetworks Extremexos=15.7
Extremenetworks Extremexos=16.1
Extremenetworks Extremexos=16.1.2
Extremenetworks Extremexos=16.1.2-patch1-1
Extremenetworks Extremexos=16.1.2-patch1-4
Extremenetworks Extremexos=16.1.3
Extremenetworks Extremexos=16.1.3-patch1-11
Extremenetworks Extremexos=16.1.3-patch1-2
Extremenetworks Extremexos=16.1.3-patch1-4
Extremenetworks Extremexos=16.1.3-patch1-7
Extremenetworks Extremexos=16.1.3-patch1-8
Extremenetworks Extremexos=16.1.3-patch1-9
Extremenetworks Extremexos=16.1.4
Extremenetworks Extremexos=16.1.4-patch1-10
Extremenetworks Extremexos=16.1.4-patch1-3
Extremenetworks Extremexos=16.1.4-patch1-7
Extremenetworks Extremexos=16.1.4-patch1-9
Extremenetworks Extremexos=16.1.5
Extremenetworks Extremexos=16.2
Extremenetworks Extremexos=16.2.2
Extremenetworks Extremexos=16.2.2-patch1-3
Extremenetworks Extremexos=16.2.3
Extremenetworks Extremexos=16.2.3-patch1-12
Extremenetworks Extremexos=16.2.3-patch1-13
Extremenetworks Extremexos=16.2.3-patch1-14
Extremenetworks Extremexos=16.2.3-patch1-3
Extremenetworks Extremexos=16.2.3-patch1-6
Extremenetworks Extremexos=16.2.4
Extremenetworks Extremexos=16.2.4-patch1-3
Extremenetworks Extremexos=16.2.4-patch1-5
Extremenetworks Extremexos=16.2.4-patch1-6
Extremenetworks Extremexos=16.2.4-patch1-8
Extremenetworks Extremexos=16.2.5
Extremenetworks Extremexos=16.2.5-patch1-10
Extremenetworks Extremexos=16.2.5-patch1-11
Extremenetworks Extremexos=16.2.5-patch1-12
Extremenetworks Extremexos=16.2.5-patch1-13
Extremenetworks Extremexos=16.2.5-patch1-15
Extremenetworks Extremexos=16.2.5-patch1-3
Extremenetworks Extremexos=16.2.5-patch1-5
Extremenetworks Extremexos=16.2.5-patch1-7
Extremenetworks Extremexos=21.1
Extremenetworks Extremexos=21.1.1-patch1-2
Extremenetworks Extremexos=21.1.1-patch1-5
Extremenetworks Extremexos=21.1.2
Extremenetworks Extremexos=21.1.2-patch1-2
Extremenetworks Extremexos=21.1.3
Extremenetworks Extremexos=21.1.3-patch1-4
Extremenetworks Extremexos=21.1.3-patch1-7
Extremenetworks Extremexos=21.1.4
Extremenetworks Extremexos=21.1.4-patch1-3
Extremenetworks Extremexos=21.1.4-patch1-6
Extremenetworks Extremexos=21.1.4-patch1-7
Extremenetworks Extremexos=21.1.5
Extremenetworks Extremexos=21.1.5-patch1-2
Extremenetworks Extremexos=21.1.5-patch1-5
Extremenetworks Extremexos=21.1.5-patch1-7
Extremenetworks Extremexos=21.1.5-patch1-9
Extremenetworks Extremexos=22.1
Extremenetworks Extremexos=22.2
Extremenetworks Extremexos=22.2.1-patch1-4
Extremenetworks Extremexos=22.3
Extremenetworks Extremexos=22.3.1-patch1-4
Extremenetworks Extremexos=22.3.1-patch1-7
Extremenetworks Extremexos=22.3.1-patch1-8
Extremenetworks Extremexos=22.3.1-patch1cc-2
Extremenetworks Extremexos=22.4
Extremenetworks Extremexos=22.4.1-patch1-2
Extremenetworks Extremexos=22.4.1-patch1-3
Extremenetworks Extremexos=22.5
Extremenetworks Extremexos=22.5.1-patch1-2
Extremenetworks Extremexos=22.5.1-patch1-3
Extremenetworks Extremexos=22.5.1-patch1-7
Extremenetworks Extremexos=22.5.1-patch1-9
Extremenetworks Extremexos=22.6
Extremenetworks Extremexos=22.6.1-patch1-1
Event History
Oct 23, 2017
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-14328?
CVE-2017-14328 is classified as a high-severity vulnerability due to its potential to allow remote attackers to trigger a buffer overflow that can lead to system reboots.
2
How do I fix CVE-2017-14328?
To fix CVE-2017-14328, upgrade to a patched version of Extreme EXOS that addresses the buffer overflow vulnerability.
3
What versions of Extreme EXOS are affected by CVE-2017-14328?
CVE-2017-14328 affects Extreme EXOS versions 15.7, 16.x, 21.x, and 22.x prior to the applied patches.
4
Can CVE-2017-14328 be exploited remotely?
Yes, CVE-2017-14328 can be exploited remotely, allowing attackers to trigger a buffer overflow from a distance.
5
What happens if CVE-2017-14328 is exploited?
Exploitation of CVE-2017-14328 can result in a system reboot, causing potential downtime and service interruption.