What is the severity of CVE-2017-17482?

CVE-2017-17482 is classified as a high severity vulnerability due to the potential for local privilege escalation.

How do I fix CVE-2017-17482?

To mitigate CVE-2017-17482, it is recommended to update OpenVMS to the latest available version that addresses this buffer overflow issue.

Who is affected by CVE-2017-17482?

CVE-2017-17482 affects users of OpenVMS versions up to 8.4-2L1 on Alpha and IA64 platforms, as well as VAX/VMS starting from version 4.0.

What type of vulnerability is CVE-2017-17482?

CVE-2017-17482 is a buffer overflow vulnerability caused by a malformed DCL command table.

Can CVE-2017-17482 be exploited remotely?

CVE-2017-17482 requires local access to be exploited, making it a local privilege escalation vulnerability.

Vulnerability/
CVE-2017-17482

high

7.8

CWE

119

7/2/2018

13/8/2018

CVE-2017-17482: Buffer Overflow

First published: Wed Feb 07 2018(Updated: )

An issue was discovered in OpenVMS through V8.4-2L2 on Alpha and through V8.4-2L1 on IA64, and VAX/VMS 4.0 and later. A malformed DCL command table may result in a buffer overflow allowing a local privilege escalation when a non-privileged account enters a crafted command line. This bug is exploitable on VAX and Alpha and may cause a process crash on IA64. Software was affected regardless of whether it was directly shipped by VMS Software, Inc. (VSI), HPE, HP, Compaq, or Digital Equipment Corporation.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
OpenVMS	<=8.4-2l1
OpenVMS	<=8.4-2l1
OpenVMS	>=4.0
OpenVMS	>=4.0

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2017-17482?
CVE-2017-17482 is classified as a high severity vulnerability due to the potential for local privilege escalation.
How do I fix CVE-2017-17482?
To mitigate CVE-2017-17482, it is recommended to update OpenVMS to the latest available version that addresses this buffer overflow issue.
Who is affected by CVE-2017-17482?
CVE-2017-17482 affects users of OpenVMS versions up to 8.4-2L1 on Alpha and IA64 platforms, as well as VAX/VMS starting from version 4.0.
What type of vulnerability is CVE-2017-17482?
CVE-2017-17482 is a buffer overflow vulnerability caused by a malformed DCL command table.
Can CVE-2017-17482 be exploited remotely?
CVE-2017-17482 requires local access to be exploited, making it a local privilege escalation vulnerability.

agent/type
agent/last-modified-date
agent/first-publish-date
agent/severity
agent/weakness
agent/references
agent/author
agent/description
agent/tags
agent/softwarecombine
agent/event
collector/nvd-index
agent/software-canonical-lookup-request
vendor/hp
canonical/hp openvms
version/hp openvms/8.4-2l1
version/hp openvms/4.0

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of CVE-2017-17482?
CVE-2017-17482 is classified as a high severity vulnerability due to the potential for local privilege escalation.
How do I fix CVE-2017-17482?
To mitigate CVE-2017-17482, it is recommended to update OpenVMS to the latest available version that addresses this buffer overflow issue.
Who is affected by CVE-2017-17482?
CVE-2017-17482 affects users of OpenVMS versions up to 8.4-2L1 on Alpha and IA64 platforms, as well as VAX/VMS starting from version 4.0.
What type of vulnerability is CVE-2017-17482?
CVE-2017-17482 is a buffer overflow vulnerability caused by a malformed DCL command table.
Can CVE-2017-17482 be exploited remotely?
CVE-2017-17482 requires local access to be exploited, making it a local privilege escalation vulnerability.