CVE-2018-7687: Client for OES Elevation of Privilege via Buffer Overflow
The Micro Focus Client for OES before version 2 SP4 IR8a has a vulnerability that could allow a local attacker to elevate privileges via a buffer overflow in ncfsd.sys.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Micro Focus Client for OESto a version that resolves this vulnerability.Fixed in 2 SP4 IR8a
Event History
Frequently Asked Questions
What is the severity of CVE-2018-7687?
CVE-2018-7687 has a high severity rating due to its potential to allow local privilege escalation through a buffer overflow.
How do I fix CVE-2018-7687?
To mitigate CVE-2018-7687, upgrade the Micro Focus Client for OES to version 2 SP4 IR8a or later.
What systems are affected by CVE-2018-7687?
CVE-2018-7687 affects the Micro Focus Client for OES versions prior to 2 SP4 IR8a.
Who can exploit CVE-2018-7687?
CVE-2018-7687 can be exploited by local attackers with access to the system.
What kind of attack can CVE-2018-7687 facilitate?
CVE-2018-7687 can facilitate a local privilege escalation attack through a buffer overflow vulnerability.