CVE-2017-8895: Use After Free
In Veritas Backup Exec 2014 before build 14.1.1187.1126, 15 before build 14.2.1180.3160, and 16 before FP1, there is a use-after-free vulnerability in multiple agents that can lead to a denial of service or remote code execution. An unauthenticated attacker can use this vulnerability to crash the agent or potentially take control of the agent process and then the system it is running on.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2017-8895?
CVE-2017-8895 has a high severity rating due to its potential for remote code execution and denial of service.
How do I fix CVE-2017-8895?
To fix CVE-2017-8895, update Veritas Backup Exec to version 14.1.1187.1126 or later, 14.2.1180.3160 or later, or apply the latest firmware for version 16.
What systems are affected by CVE-2017-8895?
CVE-2017-8895 affects versions of Veritas Backup Exec prior to specific build numbers stated in the vulnerability description.
Can CVE-2017-8895 be exploited remotely?
Yes, CVE-2017-8895 can be exploited by an unauthenticated attacker remotely.
What potential damages can result from CVE-2017-8895?
Exploitation of CVE-2017-8895 may lead to service disruptions or unauthorized remote code execution on affected systems.