CVE-2017-3195: Buffer Overflow

Published Dec 15, 2017

Updated

Commvault Edge Communication Service (cvd) prior to version 11 SP7 or version 11 SP6 with hotfix 590 is prone to a stack-based buffer overflow vulnerability that could lead to arbitrary code execution with administrative privileges.

Affected Software

7 affected components

Commvault Edge=11.0.0

Commvault Edge=11.0.0-service_pack1

Commvault Edge=11.0.0-service_pack2

Commvault Edge=11.0.0-service_pack3

Commvault Edge=11.0.0-service_pack4

Commvault Edge=11.0.0-service_pack5

Commvault Edge=11.0.0-service_pack6

Remediation

Patch Available

http://kb.commvault.com/article/SEC0013

Event History

Dec 15, 2017

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-3195?

CVE-2017-3195 is classified as a critical vulnerability due to its potential for arbitrary code execution with administrative privileges.

How do I fix CVE-2017-3195?

To mitigate CVE-2017-3195, upgrade to Commvault Edge version 11 SP7 or 11 SP6 with hotfix 590.

What causes CVE-2017-3195?

CVE-2017-3195 is caused by a stack-based buffer overflow in the Commvault Edge Communication Service (cvd).

Which versions of Commvault are affected by CVE-2017-3195?

CVE-2017-3195 affects Commvault Edge versions prior to 11 SP7 and 11 SP6 without hotfix 590.

What are the consequences of exploiting CVE-2017-3195?

Exploiting CVE-2017-3195 could lead to unauthorized arbitrary code execution with full administrative privileges.