CVE-2019-10882: Netskope client buffer overflow vulnerability
The Netskope client service, v57 before 57.2.0.219 and v60 before 60.2.0.214, running with NT\SYSTEM privilege, accepts network connections from localhost. The connection handling function in this service suffers from a stack based buffer overflow in "doHandshakefromServer" function. Local users can use this vulnerability to trigger a crash of the service and potentially cause additional impact on the system.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2019-10882?
CVE-2019-10882 is a vulnerability in the Netskope client service, versions 57 before 57.2.0.219 and v60 before 60.2.0.214, that allows local users to trigger a stack-based buffer overflow.
What is the severity of CVE-2019-10882?
CVE-2019-10882 has a severity score of 7.8 (high).
Which software versions are affected by CVE-2019-10882?
Netskope client service versions 57 before 57.2.0.219 and v60 before 60.2.0.214 are affected by CVE-2019-10882.
What is the CWE (Common Weakness Enumeration) ID for CVE-2019-10882?
The CWE IDs for CVE-2019-10882 are 119, 787, and 120.
Where can I find more information about CVE-2019-10882 and how to fix it?
You can find more information about CVE-2019-10882 and how to fix it in the references provided: [Link 1](https://airbus-seclab.github.io/advisories/netskope.html), [Link 2](https://support.netskope.com/hc/article_attachments/360033003553/Sprint_62_Release_Notes.pdf), [Link 3](https://support.netskope.com/hc/en-us/articles/360014589894-Netskope-Client).