CVE-2017-8895
- State
- Published
- Severity
- Not scored
- Published
- May 10, 2017
- Updated
- Aug 5, 2024
- Reserved
- May 10, 2017
Description
In Veritas Backup Exec 2014 before build 14.1.1187.1126, 15 before build 14.2.1180.3160, and 16 before FP1, there is a use-after-free vulnerability in multiple agents that can lead to a denial of service or remote code execution. An unauthenticated attacker can use this vulnerability to crash the agent or potentially take control of the agent process and then the system it is running on.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 98386vdb-entry
- https://www.veritas.com/content/support/en_US/security/VTS17-006.html#Issue1
- 1038561vdb-entry
- 42282exploit
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.