CVE-2017-7444: High severity Veritas System Recovery vulnerability
In Veritas System Recovery before 16 SP1, there is a DLL hijacking vulnerability in the patch installer if an attacker has write access to the directory from which the product is executed.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Veritas System Recoveryto a version that resolves this vulnerability.Fixed in 16 SP1
Event History
Frequently Asked Questions
What is the severity of CVE-2017-7444?
The severity of CVE-2017-7444 is classified as medium due to the potential for DLL hijacking.
How do I fix CVE-2017-7444?
To fix CVE-2017-7444, ensure that the application is updated to Veritas System Recovery 16 SP1 or later.
Who is affected by CVE-2017-7444?
CVE-2017-7444 affects users of Veritas System Recovery versions prior to 16 SP1.
What kind of vulnerability is CVE-2017-7444?
CVE-2017-7444 is a DLL hijacking vulnerability that can be exploited if an attacker gains write access to the directory.
What should I do if I cannot update to the latest version for CVE-2017-7444?
If unable to update, restrict write access to the directory where Veritas System Recovery is executed as a temporary mitigation.