CVE-2015-1954
high
CVSS v3
—
CVSS v2
7.8
VIR risk
7.8
Description
Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors, a different vulnerability than CVE-2015-1924, CVE-2015-1925, CVE-2015-1929, CVE-2015-1930, CVE-2015-1948, CVE-2015-1953, CVE-2015-1962, CVE-2015-1963, CVE-2015-1964, and CVE-2015-1965.
Predictions
Exploit likelihood
20%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: psirt@us.ibm.com — http://www-01.ibm.com/support/docview.wss?uid=swg21959398
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| ibm | tivoli_storage_manager_fastback | 6.1.0.0 | |
| ibm | tivoli_storage_manager_fastback | 6.1.1.0 | |
| ibm | tivoli_storage_manager_fastback | 6.1.7.2 | |
| ibm | tivoli_storage_manager_fastback | 6.1.8.0 | |
| ibm | tivoli_storage_manager_fastback | 6.1.8.1 | |
| ibm | tivoli_storage_manager_fastback | 6.1.9.0 | |
| ibm | tivoli_storage_manager_fastback | 6.1.9.1 | |
| ibm | tivoli_storage_manager_fastback | 6.1.10.0 | |
| ibm | tivoli_storage_manager_fastback | 6.1.10.1 | |
| ibm | tivoli_storage_manager_fastback | 6.1.11.0 | |
| ibm | tivoli_storage_manager_fastback | 6.1.11.1 | |
References
CWEs
CWE-119
Verify integrity in audit chain (admin only). AS-IS.