CVE-2019-10882

Netskope client buffer overflow vulnerability

State: Published
Severity: 5.5 Medium
Published: Sep 26, 2019
Updated: Sep 16, 2024
Reserved: Apr 5, 2019

Description

The Netskope client service, v57 before 57.2.0.219 and v60 before 60.2.0.214, running with NT\SYSTEM privilege, accepts network connections from localhost. The connection handling function in this service suffers from a stack based buffer overflow in "doHandshakefromServer" function. Local users can use this vulnerability to trigger a crash of the service and potentially cause additional impact on the system.

Scores

CVSS	Score	Vector	Source
3.0	5.5 Medium	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	airbus

Weaknesses

CWE-120 Buffer Overflow

Affected Products

Product	Versions
Netskope clientNetskope	Netskope client 57.2.0.219Not affected Netskope client 60.2.0.214Not affected 54 to before Netskope client*Affectedfrom 62Not affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.