CVE-2016-1340HIGH
Description
Heap-based buffer overflow in Cisco Unified Computing System (UCS) Platform Emulator 2.5(2)TS4, 3.0(2c)A, and 3.0(2c)TS9 allows local users to gain privileges via crafted libclimeta.so filename arguments, aka Bug ID CSCux68837.
References
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160414-ucspe2
Details
Source: MITRE
Published: 2016-04-16
Updated: 2016-07-29
Type: CWE-119
Risk Information
CVSS v2.0
Base Score: 7.2
Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Impact Score: 10
Exploitability Score: 3.9
Severity: HIGH
CVSS v3.0
Base Score: 8.4
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Impact Score: 5.9
Exploitability Score: 2.5
Severity: HIGH
Vulnerable Software
Configuration 1
OR
cpe:2.3:a:cisco:unified_computing_system_platform_emulator:2.5\(2\)ts4:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_computing_system_platform_emulator:3.0\(2c\)a:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_computing_system_platform_emulator:3.0\(2c\)ts9:*:*:*:*:*:*:*