CVE-2017-17482: Buffer Overflow
An issue was discovered in OpenVMS through V8.4-2L2 on Alpha and through V8.4-2L1 on IA64, and VAX/VMS 4.0 and later. A malformed DCL command table may result in a buffer overflow allowing a local privilege escalation when a non-privileged account enters a crafted command line. This bug is exploitable on VAX and Alpha and may cause a process crash on IA64. Software was affected regardless of whether it was directly shipped by VMS Software, Inc. (VSI), HPE, HP, Compaq, or Digital Equipment Corporation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-17482?
CVE-2017-17482 is classified as a high severity vulnerability due to the potential for local privilege escalation.
How do I fix CVE-2017-17482?
To mitigate CVE-2017-17482, it is recommended to update OpenVMS to the latest available version that addresses this buffer overflow issue.
Who is affected by CVE-2017-17482?
CVE-2017-17482 affects users of OpenVMS versions up to 8.4-2L1 on Alpha and IA64 platforms, as well as VAX/VMS starting from version 4.0.
What type of vulnerability is CVE-2017-17482?
CVE-2017-17482 is a buffer overflow vulnerability caused by a malformed DCL command table.
Can CVE-2017-17482 be exploited remotely?
CVE-2017-17482 requires local access to be exploited, making it a local privilege escalation vulnerability.