CVE-2019-17387: High severity aviatrix vpn client vulnerability
Published Dec 5, 2019
·Updated
An authentication flaw in the AVPNCRP service in Aviatrix VPN Client through 2.2.10 allows an attacker to gain elevated privileges through arbitrary code execution on Windows, Linux, and macOS.
Affected Software
4 affected components
Aviatrix VPN Client<=2.2.10
Apple macOS
Linux Linux kernel
Microsoft Windows
Event History
Dec 5, 2019
CVE Published
via MITRE·05:07 PM
Data Sourced
via MITRE·05:07 PM
Description
Frequently Asked Questions
1
What is CVE-2019-17387?
CVE-2019-17387 is an authentication flaw in the AVPNC_RP service in Aviatrix VPN Client through 2.2.10.
2
How does CVE-2019-17387 impact Aviatrix VPN Client?
CVE-2019-17387 allows an attacker to gain elevated privileges through arbitrary code execution on Windows, Linux, and macOS.
3
Is Apple macOS affected by CVE-2019-17387?
No, Apple macOS is not vulnerable to CVE-2019-17387.
4
Is Linux Linux kernel affected by CVE-2019-17387?
No, Linux Linux kernel is not vulnerable to CVE-2019-17387.
5
Is Microsoft Windows affected by CVE-2019-17387?
No, Microsoft Windows is not vulnerable to CVE-2019-17387.
6
What is the severity of CVE-2019-17387?
CVE-2019-17387 has a severity rating of 7.8 (high).
7
How can I fix CVE-2019-17387?
To fix CVE-2019-17387, update Aviatrix VPN Client to version 2.2.11 or higher.